Description
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulated to access an underlying account.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Ubiquiti Inc UniFi OS Server
Default version status: unaffected
0 to < 5.0.8affected
Ubiquiti Inc Express
Default version status: unaffected
0 to < 4.0.14affected
Ubiquiti Inc UDM
Default version status: unaffected
0 to < 5.1.12affected
Ubiquiti Inc UDM-Pro
Default version status: unaffected
0 to < 5.1.12affected
Ubiquiti Inc UDM-SE
Default version status: unaffected
0 to < 5.1.12affected
Ubiquiti Inc UDM-Pro-Max
Default version status: unaffected
0 to < 5.1.12affected
Ubiquiti Inc UDM-Beast
Default version status: unaffected
0 to < 5.1.11affected
Ubiquiti Inc EFG
Default version status: unaffected
0 to < 5.1.12affected
Ubiquiti Inc UDW
Default version status: unaffected
0 to < 5.1.12affected
Ubiquiti Inc UDR
Default version status: unaffected
0 to < 5.1.12affected
Ubiquiti Inc UDR7
Default version status: unaffected
0 to < 5.1.12affected
Ubiquiti Inc UDR-5G
Default version status: unaffected
0 to < 5.1.12affected
Ubiquiti Inc Express 7
Default version status: unaffected
0 to < 5.1.12affected
Ubiquiti Inc UNVR
Default version status: unaffected
0 to < 5.1.12affected
Ubiquiti Inc UNVR-Pro
Default version status: unaffected
0 to < 5.1.12affected
Ubiquiti Inc UNVR-Instant
Default version status: unaffected
0 to < 5.1.12affected
Ubiquiti Inc UNVR-G2
Default version status: unaffected
0 to < 5.1.12affected
Ubiquiti Inc UNVR-G2-Pro
Default version status: unaffected
0 to < 5.1.12affected
Ubiquiti Inc ENVR
Default version status: unaffected
0 to < 5.1.12affected
Ubiquiti Inc ENVR-Core
Default version status: unaffected
0 to < 5.1.12affected
Ubiquiti Inc UNAS-2
Default version status: unaffected
0 to < 5.1.10affected
Ubiquiti Inc UNAS-4
Default version status: unaffected
0 to < 5.1.10affected
Ubiquiti Inc UNAS-Pro
Default version status: unaffected
0 to < 5.1.10affected
Ubiquiti Inc UNAS-Pro-4
Default version status: unaffected
0 to < 5.1.10affected
Ubiquiti Inc UNAS-Pro-8
Default version status: unaffected
0 to < 5.1.10affected
Ubiquiti Inc UCKP
Default version status: unaffected
0 to < 5.1.12affected
Ubiquiti Inc UCK
Default version status: unaffected
0 to < 5.1.12affected
Ubiquiti Inc UCK-Enterprise
Default version status: unaffected
0 to < 5.1.12affected
Ubiquiti Inc UCG-Ultra
Default version status: unaffected
0 to < 5.1.12affected
Ubiquiti Inc UCG-Max
Default version status: unaffected
0 to < 5.1.12affected
Ubiquiti Inc UCG-Fiber
Default version status: unaffected
0 to < 5.1.12affected
Ubiquiti Inc UCG-Industrial
Default version status: unaffected
0 to < 5.1.12affected