Vulnerability · Published Jul 9, 2024 · Assigned by hackerone
CVE-2024-34786
Medium 4.8
In plain English
A medium-severity security flaw in UniFi iOS App from Ubiquiti. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 9% of all known vulnerabilities).
Severity (CVSS 3.1)4.8Medium
Exploit odds (30 days)0.2%top 90.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
UniFi iOS app 10.15.0 introduces a misconfiguration on 2nd Generation UniFi Access Points configured as standalone (not using UniFi Network Application) that could cause the SSID name to change and/or the WiFi Password to be removed on the 5GHz Radio. This vulnerability is fixed in UniFi iOS app 10.15.2 and later.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Ubiquiti | UniFi iOS App | 10.15.2 – before 10.15.2 |