UI vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2024-54750 Ubiquiti U6-LR 6.6.65 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root.Critical 9.8 · Dec 6, 2024
• CVE-2023-28122 A local privilege escalation (LPE) vulnerability in UI Desktop for Windows (Version 0.59.1.71 and earlier) allows a malicious actor with local access to a WindoHigh 7.8 · Apr 19, 2023
• CVE-2023-24104 Ubiquiti Networks UniFi Dream Machine Pro v7.2.95 allows attackers to bypass domain restrictions via crafted packets.Critical 9.8 · Feb 23, 2023
• CVE-2023-23912 A vulnerability, found in EdgeRouters Version 2.0.9-hotfix.5 and earlier and UniFi Security Gateways (USG) Version 4.4.56 and earlier with their DHCPv6 prefix dHigh 8.8 · Feb 9, 2023
• CVE-2022-43553 A remote code execution vulnerability in EdgeRouters (Version 2.0.9-hotfix.4 and earlier) allows a malicious actor with an operator account to run arbitrary admHigh 8.8 · Dec 5, 2022
• CVE-2022-35257 A local privilege escalation vulnerability in UI Desktop for Windows (Version 0.55.1.2 and earlier) allows a malicious actor with local access to a Windows deviHigh 7.8 · Sep 23, 2022
• CVE-2022-22570 A buffer overflow vulnerability found in the UniFi Door Access Reader Lite’s (UA Lite) firmware (Version 3.8.28.24 and earlier) allows a malicious actor who hasCritical 10 · Apr 1, 2022
• CVE-2021-44530 An injection vulnerability exists in a third-party library used in UniFi Network Version 6.5.53 and earlier (Log4J CVE-2021-44228) allows a malicious actor to cCritical 9.8 · Jan 14, 2022
• CVE-2021-22957 A Cross-Origin Resource Sharing (CORS) vulnerability found in UniFi Protect application Version 1.19.2 and earlier allows a malicious actor who has convinced a High 8.8 · Nov 24, 2021
• CVE-2021-22952 A vulnerability found in UniFi Talk application V1.12.3 and earlier permits a malicious actor who has already gained access to a network to subsequently controlHigh 8.8 · Sep 23, 2021
• CVE-2021-22944 A vulnerability found in UniFi Protect application V1.18.1 and earlier allows a malicious actor with a view-only role and network access to gain the same privilHigh 8 · Aug 31, 2021
• CVE-2021-22943 A vulnerability found in UniFi Protect application V1.18.1 and earlier permits a malicious actor who has already gained access to a network to subsequently contCritical 9.6 · Aug 31, 2021
• CVE-2021-33820 An issue was discovered in UniFi Protect G3 FLEX Camera Version UVC.v4.30.0.67.Attacker could send a huge amount of TCP SYN packet to make web service's resourcHigh 7.5 · Jun 18, 2021
• CVE-2021-33818 An issue was discovered in UniFi Protect G3 FLEX Camera Version UVC.v4.30.0.67.High 7.5 · Jun 18, 2021
• CVE-2021-22909 A vulnerability found in EdgeMAX EdgeRouter V2.0.9 and earlier could allow a malicious actor to execute a man-in-the-middle (MitM) attack during a firmware updaHigh 7.5 · May 27, 2021
• CVE-2020-24755 In Ubiquiti UniFi Video v3.10.13, when the executable starts, its first library validation is in the current directory.High 7.8 · May 17, 2021
• CVE-2021-22882 UniFi Protect before v1.17.1 allows an attacker to use spoofed cameras to perform a denial-of-service attack that may cause the UniFi Protect controller to crasHigh 7.5 · Feb 23, 2021
• CVE-2020-8282 A security issue was found in EdgePower 24V/54V firmware v1.7.0 and earlier where, due to missing CSRF protections, an attacker would have been able to perform High 8.8 · Dec 14, 2020
• CVE-2020-27888 An issue was discovered on Ubiquiti UniFi Meshing Access Point UAP-AC-M 4.3.21.11325 and UniFi Controller 6.0.28 devices.High 7.5 · Oct 27, 2020
• CVE-2020-8234 A vulnerability exists in The EdgeMax EdgeSwitch firmware <v1.9.1 where the EdgeSwitch legacy web interface SIDSSL cookie for admin can be guessed, enabling theCritical 9.8 · Aug 21, 2020
• CVE-2020-8233 A command injection vulnerability exists in EdgeSwitch firmware <v1.9.0 that allowed an authenticated read-only user to execute arbitrary shell commands over thHigh 8.8 · Aug 17, 2020
• CVE-2020-8188 We have recently released new version of UniFi Protect firmware v1.13.3 and v1.14.10 for Unifi Cloud Key Gen2 Plus and UniFi Dream Machine Pro/UNVR respectivelyHigh 8.8 · Jul 2, 2020
• CVE-2020-12695 The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request with a delivery URL on a differenHigh 7.5 · Jun 8, 2020
• CVE-2020-8171 We have recently released new version of AirMax AirOS firmware v6.3.0 for TI, XW and XM boards that fixes vulnerabilities found on AirMax AirOS v6.2.0 and priorCritical 9.8 · May 26, 2020
• CVE-2020-8168 We have recently released new version of AirMax AirOS firmware v6.3.0 for TI, XW and XM boards that fixes vulnerabilities found on AirMax AirOS v6.2.0 and priorHigh 8.8 · May 26, 2020