Description
A misconfigured query in UniFi Network (v9.1.120 and earlier) could allow users to authenticate to Enterprise WiFi or VPN Server (l2tp and OpenVPN) using a device’s MAC address from 802.1X or MAC Authentication, if both services are enabled and share the same RADIUS profile.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ubiquiti | UniFi Network Application | 9.2.87 – < 9.2.87 | 9.2.87 |
Advisories 1
- WID-SEC-2025-1360 Ubiquiti UniFi Network Application: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen BSI CERT-Bund (WID) · Jun 19, 2025