Vulnerability · Published Jul 2, 2020 · Assigned by hackerone

CVE-2020-8188

High 8.8

In plain English

A high-severity command injection in Protect for UniFi Cloud Key Gen2 Plus, UniFi Dream Machine Pro, UNVR. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.3% (higher than 71% of all known vulnerabilities).

Severity (CVSS NVD)8.8High

Exploit odds (30 days)1.3%top 28.5% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

We have recently released new version of UniFi Protect firmware v1.13.3 and v1.14.10 for Unifi Cloud Key Gen2 Plus and UniFi Dream Machine Pro/UNVR respectively that fixes vulnerabilities found on Protect firmware v1.13.2, v1.14.9 and prior according to the description below:View only users can run certain custom commands which allows them to assign themselves unauthorized roles and escalate their privileges.

Affected products (as reported)

Vendor	Product	Versions
n/a	Protect for UniFi Cloud Key Gen2 Plus, UniFi Dream Machine Pro, UNVR	Fixed in versions: v1.13.3 and v1.14.10

Weakness: CWE-77

References

https://community.ui.com/releases/Security-advisory-bulletin-012-012/1bba9134-f888-4010-81c0-b0dd53b9bda4 x_refsource_MISC
https://community.ui.com/releases/UniFi-Protect-1-13-3/f4be7d35-93a3-422b-8eef-122e442c00ba x_refsource_MISC
https://community.ui.com/releases/UniFi-Protect-1-14-10/48a8dbdd-b872-47fa-bbde-1d24ddf5d5b5 x_refsource_MISC