An Improper Access Control could allow a malicious actor authenticated in the API to enable Android Debug Bridge (ADB) and make unsupported changes to the system.
Affected Products:
UniFi Connect EV Station (Version 1.1.18 and earlier)
UniFi Connect EV Station Pro (Version 1.1.18 and earlier)
UniFi Access G2 Reader Pro (Version 1.2.172 and earlier)
UniFi Access Reader Pro (Version 2.7.238 and earlier)
UniFi Access Intercom (Version 1.0.66 and earlier)
UniFi Access Intercom Viewer (Version 1.0.5 and earlier)
UniFi Connect Display (Version 1.9.324 and earlier)
UniFi Connect Display Cast (Version 1.6.225 and earlier)
Mitigation:
Update UniFi Connect Application to Version 3.10.7 or later.
Update UniFi Connect EV Station to Version 1.2.15 or later.
Update UniFi Connect EV Station Pro to Version 1.2.15 or later.
Update UniFi Access G2 Reader Pro Version 1.3.37 or later.
Update UniFi Access Reader Pro Version 2.8.19 or later.
Update UniFi Access Intercom Version 1.1.32 or later.
Update UniFi Access Intercom Viewer Version 1.1.6 or later.
Update UniFi Connect Display to Version 1.11.348 or later.
Update UniFi Connect Display Cast to Version 1.8.255 or later.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
UniFi Connect EV Station
Vendor
Ubiquiti Inc
Product
UniFi Connect EV Station
Platforms
Unknown
Default status
unaffected
UniFi Connect EV Station · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.2.15
affected
semver
1.2.15
Unavailable
None listed
UniFi Connect EV Station Pro
Vendor
Ubiquiti Inc
Product
UniFi Connect EV Station Pro
Platforms
Unknown
Default status
unaffected
UniFi Connect EV Station Pro · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.2.15
affected
semver
1.2.15
Unavailable
None listed
UniFi Access G2 Reader Pro
Vendor
Ubiquiti Inc
Product
UniFi Access G2 Reader Pro
Platforms
Unknown
Default status
unaffected
UniFi Access G2 Reader Pro · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.3.37
affected
semver
1.3.37
Unavailable
None listed
UniFi Access Reader Pro
Vendor
Ubiquiti Inc
Product
UniFi Access Reader Pro
Platforms
Unknown
Default status
unaffected
UniFi Access Reader Pro · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
2.8.19
affected
semver
2.8.19
Unavailable
None listed
UniFi Access Intercom
Vendor
Ubiquiti Inc
Product
UniFi Access Intercom
Platforms
Unknown
Default status
unaffected
UniFi Access Intercom · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.1.32
affected
semver
1.1.32
Unavailable
None listed
UniFi Access Intercom Viewer
Vendor
Ubiquiti Inc
Product
UniFi Access Intercom Viewer
Platforms
Unknown
Default status
unaffected
UniFi Access Intercom Viewer · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.1.6
affected
semver
1.1.6
Unavailable
None listed
UniFi Connect Display
Vendor
Ubiquiti Inc
Product
UniFi Connect Display
Platforms
Unknown
Default status
unaffected
UniFi Connect Display · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.11.348
affected
semver
1.11.348
Unavailable
None listed
UniFi Connect Display Cast
Vendor
Ubiquiti Inc
Product
UniFi Connect Display Cast
Platforms
Unknown
Default status
unaffected
UniFi Connect Display Cast · Scoped product and version facts