ZDI-CAN-25552 HIGH 8.1 Overdue Nov 15, 2024

Ubiquiti Networks

Ubiquiti Networks, a major manufacturer of networking and wireless infrastructure equipment used by enterprises and service providers, has a high-severity vulnerability (CVSS 8.1) that can be exploited remotely without authentication or user interaction, potentially compromising confidentiality, integrity, and availability of affected systems. The attack requires some specific conditions to succeed but poses significant risk to exposed devices. Security teams managing Ubiquiti infrastructure should prioritize monitoring for patches when available on the March 15, 2025 deadline and consider restricting network access to these devices in the interim.

Advisory Details
Researcher Discovered by: @ExLuck99
Reported November 15, 2024
Deadline March 15, 2025 397d overdue
CVSS Vector AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy