A malicious actor with access to the network and low privileges could exploit a series of authenticated SQL Injection vulnerabilities found in UniFi OS to escalate privileges within such UniFi OS devices or instances.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
UniFi OS Server
Vendor
Ubiquiti Inc
Product
UniFi OS Server
Platforms
Unknown
Default status
unaffected
UniFi OS Server · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
5.1.19
Unavailable
None listed
Dream Machines
Vendor
Ubiquiti Inc
Product
Dream Machines
Platforms
Unknown
Default status
unaffected
Dream Machines · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
5.1.19
Unavailable
None listed
Enterprise Fortress Gateway
Vendor
Ubiquiti Inc
Product
Enterprise Fortress Gateway
Platforms
Unknown
Default status
unaffected
Enterprise Fortress Gateway · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
5.1.19
Unavailable
None listed
Dream Wall
Vendor
Ubiquiti Inc
Product
Dream Wall
Platforms
Unknown
Default status
unaffected
Dream Wall · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
5.1.19
Unavailable
None listed
Dream Routers
Vendor
Ubiquiti Inc
Product
Dream Routers
Platforms
Unknown
Default status
unaffected
Dream Routers · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
5.1.19
Unavailable
None listed
Express 7
Vendor
Ubiquiti Inc
Product
Express 7
Platforms
Unknown
Default status
unaffected
Express 7 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
5.1.19
Unavailable
None listed
Cloud Keys
Vendor
Ubiquiti Inc
Product
Cloud Keys
Platforms
Unknown
Default status
unaffected
Cloud Keys · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
5.1.19
Unavailable
None listed
Network Video Recorders
Vendor
Ubiquiti Inc
Product
Network Video Recorders
Platforms
Unknown
Default status
unaffected
Network Video Recorders · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
5.1.19
Unavailable
None listed
Enterprise Video Recorders
Vendor
Ubiquiti Inc
Product
Enterprise Video Recorders
Platforms
Unknown
Default status
unaffected
Enterprise Video Recorders · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
5.1.19
Unavailable
None listed
Cloud Gateways
Vendor
Ubiquiti Inc
Product
Cloud Gateways
Platforms
Unknown
Default status
unaffected
Cloud Gateways · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
5.1.19
Unavailable
None listed
Network Attached Storage
Vendor
Ubiquiti Inc
Product
Network Attached Storage
Platforms
Unknown
Default status
unaffected
Network Attached Storage · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
5.1.19
Unavailable
None listed
Enterprise Firewall Core
Vendor
Ubiquiti Inc
Product
Enterprise Firewall Core
Platforms
Unknown
Default status
unaffected
Enterprise Firewall Core · Scoped product and version facts