Description
Under certain network configurations, a malicious actor with access to network could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to make unauthorized changes to such UniFi OS devices.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Ubiquiti Inc UDM
Default version status: unaffected
0 to < 5.1.15affected
Ubiquiti Inc UDM-Pro
Default version status: unaffected
0 to < 5.1.15affected
Ubiquiti Inc UDM-SE
Default version status: unaffected
0 to < 5.1.15affected
Ubiquiti Inc UDM-Pro-Max
Default version status: unaffected
0 to < 5.1.15affected
Ubiquiti Inc UDM-Beast
Default version status: unaffected
0 to < 5.1.15affected
Ubiquiti Inc EFG
Default version status: unaffected
0 to < 5.1.15affected
Ubiquiti Inc UDW
Default version status: unaffected
0 to < 5.1.15affected
Ubiquiti Inc UDR
Default version status: unaffected
0 to < 5.1.15affected
Ubiquiti Inc UDR7
Default version status: unaffected
0 to < 5.1.15affected
Ubiquiti Inc UDR-5G
Default version status: unaffected
0 to < 5.1.15affected
Ubiquiti Inc Express 7
Default version status: unaffected
0 to < 5.1.15affected
Ubiquiti Inc UCG-Ultra
Default version status: unaffected
0 to < 5.1.15affected
Ubiquiti Inc UCG-Max
Default version status: unaffected
0 to < 5.1.15affected
Ubiquiti Inc UCG-Fiber
Default version status: unaffected
0 to < 5.1.15affected
Ubiquiti Inc UCG-Industrial
Default version status: unaffected
0 to < 5.1.15affected