Description
A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) to escalate privileges within such UniFi OS devices or instances.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Ubiquiti Inc UniFi OS Server
Default version status: unaffected
0 to < 5.1.19affected
Ubiquiti Inc Dream Machines
Default version status: unaffected
0 to < 5.1.19affected
Ubiquiti Inc Enterprise Fortress Gateway
Default version status: unaffected
0 to < 5.1.19affected
Ubiquiti Inc Dream Wall
Default version status: unaffected
0 to < 5.1.19affected
Ubiquiti Inc Dream Routers
Default version status: unaffected
0 to < 5.1.19affected
Ubiquiti Inc Express 7
Default version status: unaffected
0 to < 5.1.19affected
Ubiquiti Inc Cloud Keys
Default version status: unaffected
0 to < 5.1.19affected
Ubiquiti Inc Network Video Recorders
Default version status: unaffected
0 to < 5.1.19affected
Ubiquiti Inc Enterprise Video Recorders
Default version status: unaffected
0 to < 5.1.19affected
Ubiquiti Inc Cloud Gateways
Default version status: unaffected
0 to < 5.1.19affected
Ubiquiti Inc Network Attached Storage
Default version status: unaffected
0 to < 5.1.19affected
Ubiquiti Inc Enterprise Firewall Core
Default version status: unaffected
0 to < 5.1.19affected