Ubiquiti

Products

Exploited and recent CVEs

• CVE-2024-45205 High 7.1 An Improper Certificate Validation on the UniFi iOS App managing a standalone UniFi Access Point (not using UniFi Network Application) could allow a malicious actor with access to an adjacent network 0.1%
• CVE-2024-37380 Medium 5.3 A misconfiguration on UniFi U6+ Access Point could cause an incorrect VLAN traffic forwarding to APs meshed to UniFi U6+ Access Point. Affected Products: UniFi U6+ Access Point (Version 6.6.65 and e 0.2%
• CVE-2024-34786 Medium 4.8 UniFi iOS app 10.15.0 introduces a misconfiguration on 2nd Generation UniFi Access Points configured as standalone (not using UniFi Network Application) that could cause the SSID name to change and/or 0.2%
• CVE-2023-41721 Critical 10.0 Instances of UniFi Network Application that (i) are run on a UniFi Gateway Console, and (ii) are versions 7.5.176. and earlier, implement device adoption with improper access control logic, creating a 0.8%
• CVE-2023-31998 Medium 5.9 A heap overflow vulnerability found in EdgeRouters and Aircubes allows a malicious actor to interrupt UPnP service to said devices. 0.8%
• CVE-2023-31998 Medium 5.9 A heap overflow vulnerability found in EdgeRouters and Aircubes allows a malicious actor to interrupt UPnP service to said devices. 0.8%
• CVE-2023-32000 Unrated A Cross-Site Scripting (XSS) vulnerability found in UniFi Network (Version 7.3.83 and earlier) allows a malicious actor with Site Administrator credentials to escalate privileges by persuading an Admi 0.4%
• CVE-2023-2379 High 7.5 Ubiquiti EdgeRouter X Web Service denial of service 1.3%
• CVE-2023-2378 High 7.2 Ubiquiti EdgeRouter X Web Management command injection 7.6%
• CVE-2023-2377 High 7.2 Ubiquiti EdgeRouter X Web Management command injection 7.6%
• CVE-2023-2376 High 7.2 Ubiquiti EdgeRouter X Web Management command injection 7.6%
• CVE-2023-2375 High 7.2 Ubiquiti EdgeRouter X Web Management command injection 9.3%
• CVE-2023-2374 High 7.2 Ubiquiti EdgeRouter X Web Management command injection 6.9%
• CVE-2023-2373 High 7.2 Ubiquiti EdgeRouter X Web Management command injection 7.6%
• CVE-2023-1456 High 7.2 A vulnerability, which was classified as critical, has been found in Ubiquiti EdgeRouter X 2.0.9-hotfix.6. This issue affects some unknown processing of the component NAT Configuration Handler. The ma 1.8%
• CVE-2023-1457 High 7.2 A vulnerability, which was classified as critical, was found in Ubiquiti EdgeRouter X 2.0.9-hotfix.6. Affected is an unknown function of the component Static Routing Configuration Handler. The manipul 1.8%
• CVE-2023-1458 High 7.2 A vulnerability has been found in Ubiquiti EdgeRouter X 2.0.9-hotfix.6 and classified as critical. Affected by this vulnerability is an unknown functionality of the component OSPF Handler. The manipul 3.3%