Unifi Access
Monthly
Unauthenticated access to the UniFi Access management API in application versions 3.3.22 through 3.4.31 allows anyone who can reach the management network to take full control of the door access platform - enumerating and modifying doors, users, credentials and controllers - because the API was exposed without any authentication check (CWE-306). Ubiquiti scores it CVSS 10.0 (AV:N), while our assessment rates it AV:A: the realistic gate is management-plane reachability, not internet-wide exposure, so segmented deployments are materially less exposed. EPSS is 41.09% (99th percentile), indicating high predicted exploitation interest, but at time of analysis there is no CISA KEV listing and no public exploit identified at time of analysis - the vendor reports the flaw was introduced in 3.3.22 and fixed in 4.0.21.
Unauthenticated access to the UniFi Access management API in application versions 3.3.22 through 3.4.31 allows anyone who can reach the management network to take full control of the door access platform - enumerating and modifying doors, users, credentials and controllers - because the API was exposed without any authentication check (CWE-306). Ubiquiti scores it CVSS 10.0 (AV:N), while our assessment rates it AV:A: the realistic gate is management-plane reachability, not internet-wide exposure, so segmented deployments are materially less exposed. EPSS is 41.09% (99th percentile), indicating high predicted exploitation interest, but at time of analysis there is no CISA KEV listing and no public exploit identified at time of analysis - the vendor reports the flaw was introduced in 3.3.22 and fixed in 4.0.21.