Description
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in certain devices running UniFi OS to execute a Command Injection within such UniFi OS devices or instances.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Ubiquiti Inc UniFi OS Server
Default version status: unaffected
0 to < 5.1.15affected
Ubiquiti Inc Express
Default version status: unaffected
0 to < 4.0.15affected
Ubiquiti Inc UDM
Default version status: unaffected
0 to < 5.1.15affected
Ubiquiti Inc UDM-Pro
Default version status: unaffected
0 to < 5.1.15affected
Ubiquiti Inc UDM-SE
Default version status: unaffected
0 to < 5.1.15affected
Ubiquiti Inc UDM-Pro-Max
Default version status: unaffected
0 to < 5.1.15affected
Ubiquiti Inc UDM-Beast
Default version status: unaffected
0 to < 5.1.15affected
Ubiquiti Inc EFG
Default version status: unaffected
0 to < 5.1.15affected
Ubiquiti Inc UDW
Default version status: unaffected
0 to < 5.1.15affected
Ubiquiti Inc UDR
Default version status: unaffected
0 to < 5.1.15affected
Ubiquiti Inc UDR7
Default version status: unaffected
0 to < 5.1.15affected
Ubiquiti Inc UDR-5G
Default version status: unaffected
0 to < 5.1.15affected
Ubiquiti Inc Express 7
Default version status: unaffected
0 to < 5.1.15affected
Ubiquiti Inc UNVR
Default version status: unaffected
0 to < 5.1.15affected
Ubiquiti Inc UNVR-Pro
Default version status: unaffected
0 to < 5.1.15affected
Ubiquiti Inc UNVR-Instant
Default version status: unaffected
0 to < 5.1.15affected
Ubiquiti Inc UNVR-G2
Default version status: unaffected
0 to < 5.1.15affected
Ubiquiti Inc UNVR-G2-Pro
Default version status: unaffected
0 to < 5.1.15affected
Ubiquiti Inc ENVR
Default version status: unaffected
0 to < 5.1.15affected
Ubiquiti Inc ENVR-Core
Default version status: unaffected
0 to < 5.1.15affected
Ubiquiti Inc UNAS-2
Default version status: unaffected
0 to < 5.1.16affected
Ubiquiti Inc UNAS-4
Default version status: unaffected
0 to < 5.1.16affected
Ubiquiti Inc UNAS-Pro
Default version status: unaffected
0 to < 5.1.16affected
Ubiquiti Inc UNAS-Pro-4
Default version status: unaffected
0 to < 5.1.16affected
Ubiquiti Inc UNAS-Pro-8
Default version status: unaffected
0 to < 5.1.16affected
Ubiquiti Inc UCKP
Default version status: unaffected
0 to < 5.1.15affected
Ubiquiti Inc UCK
Default version status: unaffected
0 to < 5.1.15affected
Ubiquiti Inc UCK-Enterprise
Default version status: unaffected
0 to < 5.1.15affected
Ubiquiti Inc UCG-Ultra
Default version status: unaffected
0 to < 5.1.15affected
Ubiquiti Inc UCG-Max
Default version status: unaffected
0 to < 5.1.15affected
Ubiquiti Inc UCG-Fiber
Default version status: unaffected
0 to < 5.1.15affected
Ubiquiti Inc UCG-Industrial
Default version status: unaffected
0 to < 5.1.15affected