Vulnerability · Published Jul 22, 2024 · Assigned by hackerone
CVE-2024-37380
Medium 5.3
In plain English
A medium-severity security flaw in UniFi U6+ Access Point from Ubiquiti. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 11% of all known vulnerabilities).
Severity (CVSS 3.0)5.3Medium
Exploit odds (30 days)0.2%top 88.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A misconfiguration on UniFi U6+ Access Point could cause an incorrect VLAN traffic forwarding to APs meshed to UniFi U6+ Access Point. Affected Products: UniFi U6+ Access Point (Version 6.6.65 and earlier) Mitigation: Update your UniFi U6+ Access Point to Version 6.6.74 or later.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Ubiquiti | UniFi U6+ Access Point | 6.6.74 – before 6.6.74 |