Vulnerability · Published Jan 14, 2022 · Assigned by hackerone
CVE-2021-44530
Critical 9.8
In plain English
A critical-severity improper input validation in UniFi Network application. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 66% of all known vulnerabilities).
Severity (CVSS NVD)9.8Critical
Exploit odds (30 days)1.1%top 34.5% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
An injection vulnerability exists in a third-party library used in UniFi Network Version 6.5.53 and earlier (Log4J CVE-2021-44228) allows a malicious actor to control the application.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | UniFi Network application | Fixed in 6.5.54 and later. |
Weakness: CWE-20