A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in certain de
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 5.1.15, 4.0.15, 5.1.16
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: no
- Technical impact: total
Summary
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances.
Timeline
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: total
- CVE published
- Record last updated
Affected versions
- Ubiquiti Inc UniFi OS Server
fixed in 5.1.15
- Ubiquiti Inc Express
fixed in 4.0.15
- Ubiquiti Inc UDM
fixed in 5.1.15
- Ubiquiti Inc UDM-Pro
fixed in 5.1.15
- Ubiquiti Inc UDM-SE
fixed in 5.1.15
- Ubiquiti Inc UDM-Pro-Max
fixed in 5.1.15
- Ubiquiti Inc UDM-Beast
fixed in 5.1.15
- Ubiquiti Inc EFG
fixed in 5.1.15
- Ubiquiti Inc UDW
fixed in 5.1.15
- Ubiquiti Inc UDR
fixed in 5.1.15
- Ubiquiti Inc UDR7
fixed in 5.1.15
- Ubiquiti Inc UDR-5G
fixed in 5.1.15
- Ubiquiti Inc Express 7
fixed in 5.1.15
- Ubiquiti Inc UNVR
fixed in 5.1.15
- Ubiquiti Inc UNVR-Pro
fixed in 5.1.15
- Ubiquiti Inc UNVR-Instant
fixed in 5.1.15
- Ubiquiti Inc UNVR-G2
fixed in 5.1.15
- Ubiquiti Inc UNVR-G2-Pro
fixed in 5.1.15
- Ubiquiti Inc ENVR
fixed in 5.1.15
- Ubiquiti Inc ENVR-Core
fixed in 5.1.15
- Ubiquiti Inc UNAS-2
fixed in 5.1.16
- Ubiquiti Inc UNAS-4
fixed in 5.1.16
- Ubiquiti Inc UNAS-Pro
fixed in 5.1.16
- Ubiquiti Inc UNAS-Pro-4
fixed in 5.1.16
- Ubiquiti Inc UNAS-Pro-8
fixed in 5.1.16
- Ubiquiti Inc UCKP
fixed in 5.1.15
- Ubiquiti Inc UCK
fixed in 5.1.15
- Ubiquiti Inc UCK-Enterprise
fixed in 5.1.15
- Ubiquiti Inc UCG-Ultra
fixed in 5.1.15
- Ubiquiti Inc UCG-Max
fixed in 5.1.15
- Ubiquiti Inc UCG-Fiber
fixed in 5.1.15
- Ubiquiti Inc UCG-Industrial
fixed in 5.1.15