An Improper Certificate Validation could allow a malicious actor with access to an adjacent network to take control of the system.
Affected Products:
UniFi Connect Application (Version 3.7.9 and earlier)
UniFi Connect EV Station (Version 1.1.18 and earlier)
UniFi Connect EV Station Pro (Version 1.1.18 and earlier)
UniFi Connect Display (Version 1.9.324 and earlier)
UniFi Connect Display Cast (Version 1.6.225 and earlier)
Mitigation:
Update UniFi Connect Application to Version 3.10.7 or later.
Update UniFi Connect EV Station to Version 1.2.15 or later.
Update UniFi Connect EV Station Pro to Version 1.2.15 or later.
Update UniFi Connect Display to Version 1.11.348 or later.
Update UniFi Connect Display Cast to Version 1.8.255 or later.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
UniFi Connect Application
Vendor
Ubiquiti Inc
Product
UniFi Connect Application
Platforms
Unknown
Default status
unaffected
UniFi Connect Application · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
3.10.7
affected
semver
3.10.7
Unavailable
None listed
UniFi Connect EV Station
Vendor
Ubiquiti Inc
Product
UniFi Connect EV Station
Platforms
Unknown
Default status
unaffected
UniFi Connect EV Station · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.2.15
affected
semver
1.2.15
Unavailable
None listed
UniFi Connect EV Station Pro
Vendor
Ubiquiti Inc
Product
UniFi Connect EV Station Pro
Platforms
Unknown
Default status
unaffected
UniFi Connect EV Station Pro · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.2.15
affected
semver
1.2.15
Unavailable
None listed
UniFi Connect Display
Vendor
Ubiquiti Inc
Product
UniFi Connect Display
Platforms
Unknown
Default status
unaffected
UniFi Connect Display · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.11.348
affected
semver
1.11.348
Unavailable
None listed
UniFi Connect Display Cast
Vendor
Ubiquiti Inc
Product
UniFi Connect Display Cast
Platforms
Unknown
Default status
unaffected
UniFi Connect Display Cast · Scoped product and version facts