CVE-2025-23091

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2025
Source publication: Feb 1, 2025
Source updated: Mar 13, 2025
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

An Improper Certificate Validation on UniFi OS devices, with Identity Enterprise configured, could allow a malicious actor to execute a man-in-the-middle (MitM) attack during application update.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

UDM

Vendor: Ubiquiti Inc
Product: UDM
Platforms: Unknown
Default status: unaffected

UDM · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
4.1.13	`affected`	semver	4.1.13	Unavailable	None listed

UDM-Pro

Vendor: Ubiquiti Inc
Product: UDM-Pro
Platforms: Unknown
Default status: unaffected

UDM-Pro · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
4.1.13	`affected`	semver	4.1.13	Unavailable	None listed

UDM-SE

Vendor: Ubiquiti Inc
Product: UDM-SE
Platforms: Unknown
Default status: unaffected

UDM-SE · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
4.1.13	`affected`	semver	4.1.13	Unavailable	None listed

UDM-Pro-Max

Vendor: Ubiquiti Inc
Product: UDM-Pro-Max
Platforms: Unknown
Default status: unaffected

UDM-Pro-Max · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
4.1.13	`affected`	semver	4.1.13	Unavailable	None listed

UDW

Vendor: Ubiquiti Inc
Product: UDW
Platforms: Unknown
Default status: unaffected

UDW · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
4.1.13	`affected`	semver	4.1.13	Unavailable	None listed

UNVR

Vendor: Ubiquiti Inc
Product: UNVR
Platforms: Unknown
Default status: unaffected

UNVR · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
4.1.11	`affected`	semver	4.1.11	Unavailable	None listed

UNVR PRO

Vendor: Ubiquiti Inc
Product: UNVR PRO
Platforms: Unknown
Default status: unaffected

UNVR PRO · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
4.1.11	`affected`	semver	4.1.11	Unavailable	None listed

UCKP

Vendor: Ubiquiti Inc
Product: UCKP
Platforms: Unknown
Default status: unaffected

UCKP · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
4.1.11	`affected`	semver	4.1.11	Unavailable	None listed

UCK

Vendor: Ubiquiti Inc
Product: UCK
Platforms: Unknown
Default status: unaffected

UCK · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
4.1.11	`affected`	semver	4.1.11	Unavailable	None listed

UCK-Enterprise

Vendor: Ubiquiti Inc
Product: UCK-Enterprise
Platforms: Unknown
Default status: unaffected

UCK-Enterprise · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
4.1.11	`affected`	semver	4.1.11	Unavailable	None listed

UCG-Max

Vendor: Ubiquiti Inc
Product: UCG-Max
Platforms: Unknown
Default status: unaffected

UCG-Max · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
4.1.13	`affected`	semver	4.1.13	Unavailable	None listed

EFG

Vendor: Ubiquiti Inc
Product: EFG
Platforms: Unknown
Default status: unaffected

EFG · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
4.1.13	`affected`	semver	4.1.13	Unavailable	None listed