Ubiquiti Inc UniFi Access Points

• CVE-2024-22054 High 7.5 A malformed discovery packet sent by a malicious actor with preexisting access to the network could interrupt the functionality of device management and discovery. Affected Products: UniFi Access Po 0.5%
• CVE-2023-35085 Critical 9.0 An integer overflow vulnerability in all UniFi Access Points and Switches, excluding the Switch Flex Mini, with SNMP Monitoring and default settings enabled could allow a Remote Code Execution (RCE). 1.0%
• CVE-2023-38034 High 8.3 A command injection vulnerability in the DHCP Client function of all UniFi Access Points and Switches, excluding the Switch Flex Mini, could allow a Remote Code Execution (RCE). Affected Products: 1.4%