An Improper Input Validation in certain UniFi Access devices could allow a Command Injection by a malicious actor with access to UniFi Access management network.
Affected Products:
UniFi Access Reader Pro (Version 2.14.21 and earlier)
UniFi Access G2 Reader Pro (Version 1.10.32 and earlier)
UniFi Access G3 Reader Pro (Version 1.10.30 and earlier)
UniFi Access Intercom (Version 1.7.28 and earlier)
UniFi Access G3 Intercom (Version 1.7.29 and earlier)
UniFi Access Intercom Viewer (Version 1.3.20 and earlier)
Mitigation:
Update UniFi Access Reader Pro Version 2.15.9 or later
Update UniFi Access G2 Reader Pro Version 1.11.23 or later
Update UniFi Access G3 Reader Pro Version 1.11.22 or later
Update UniFi Access Intercom Version 1.8.22 or later
Update UniFi Access G3 Intercom Version 1.8.22 or later
Update UniFi Access Intercom Viewer Version 1.4.39 or later
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
UniFi Access Reader Pro
Vendor
Ubiquiti Inc
Product
UniFi Access Reader Pro
Platforms
Unknown
Default status
unaffected
UniFi Access Reader Pro · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
2.15.9
affected
semver
2.15.9
Unavailable
None listed
UniFi Access G2 Reader Pro
Vendor
Ubiquiti Inc
Product
UniFi Access G2 Reader Pro
Platforms
Unknown
Default status
unaffected
UniFi Access G2 Reader Pro · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.11.23
affected
semver
1.11.23
Unavailable
None listed
UniFi Access G3 Reader Pro
Vendor
Ubiquiti Inc
Product
UniFi Access G3 Reader Pro
Platforms
Unknown
Default status
unaffected
UniFi Access G3 Reader Pro · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.11.22
affected
semver
1.11.22
Unavailable
None listed
UniFi Access Intercom
Vendor
Ubiquiti Inc
Product
UniFi Access Intercom
Platforms
Unknown
Default status
unaffected
UniFi Access Intercom · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.8.22
affected
semver
1.8.22
Unavailable
None listed
UniFi Access G3 Intercom
Vendor
Ubiquiti Inc
Product
UniFi Access G3 Intercom
Platforms
Unknown
Default status
unaffected
UniFi Access G3 Intercom · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.8.22
affected
semver
1.8.22
Unavailable
None listed
UniFi Access Intercom Viewer
Vendor
Ubiquiti Inc
Product
UniFi Access Intercom Viewer
Platforms
Unknown
Default status
unaffected
UniFi Access Intercom Viewer · Scoped product and version facts