Description
A malicious actor with access to the network and under certain conditions could exploit an Improper Neutralization of CRLF Sequences vulnerability found in certain devices running UniFi OS to bypass authentication to such UniFi OS devices or instances.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Ubiquiti Inc UniFi OS Server
Default version status: unaffected
0 to < 5.1.37affected
Ubiquiti Inc Cloud Keys
Default version status: unaffected
0 to < 5.1.31affected
Ubiquiti Inc Network Video Recorders
Default version status: unaffected
0 to < 5.1.31affected
Ubiquiti Inc Enterprise Network Video Recorders
Default version status: unaffected
0 to < 5.1.31affected
Ubiquiti Inc Enterprise Network Attached Storage
Default version status: unaffected
0 to < 5.1.31affected
Ubiquiti Inc Dream Machines
Default version status: unaffected
0 to < 5.1.31affected
Ubiquiti Inc Enterprise Firewall Core
Default version status: unaffected
0 to < 5.1.31affected
Ubiquiti Inc Dream Routers
Default version status: unaffected
0 to < 5.1.31affected
Ubiquiti Inc Enterprise Fortress Gateway
Default version status: unaffected
0 to < 5.1.31affected
Ubiquiti Inc Cloud Gateways
Default version status: unaffected
0 to < 5.1.31affected
Ubiquiti Inc Dream Wall
Default version status: unaffected
0 to < 5.1.31affected
Ubiquiti Inc Express 7
Default version status: unaffected
0 to < 5.1.31affected
Ubiquiti Inc Network Attached Storage
Default version status: unaffected
0 to < 5.1.32affected
Ubiquiti Inc Express
Default version status: unaffected
0 to < 4.0.17affected