Description
A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Ubiquiti Inc UniFi OS Server
Default version status: unaffected
0 to < 5.1.37affected
Ubiquiti Inc Cloud Keys
Default version status: unaffected
0 to < 5.1.31affected
Ubiquiti Inc Network Video Recorders
Default version status: unaffected
0 to < 5.1.31affected
Ubiquiti Inc Enterprise Network Video Recorders
Default version status: unaffected
0 to < 5.1.31affected
Ubiquiti Inc Enterprise Network Attached Storage
Default version status: unaffected
0 to < 5.1.31affected
Ubiquiti Inc Dream Machines
Default version status: unaffected
0 to < 5.1.31affected
Ubiquiti Inc Enterprise Firewall Core
Default version status: unaffected
0 to < 5.1.31affected
Ubiquiti Inc Dream Routers
Default version status: unaffected
0 to < 5.1.31affected
Ubiquiti Inc Enterprise Fortress Gateway
Default version status: unaffected
0 to < 5.1.31affected
Ubiquiti Inc Cloud Gateways
Default version status: unaffected
0 to < 5.1.31affected
Ubiquiti Inc Dream Wall
Default version status: unaffected
0 to < 5.1.31affected
Ubiquiti Inc Express 7
Default version status: unaffected
0 to < 5.1.31affected
Ubiquiti Inc Network Attached Storage
Default version status: unaffected
0 to < 5.1.32affected