A malicious actor with access to the network and under certain network configurations could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to make unauthorized changes to such UniFi OS devices.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Dream Machines
Vendor
Ubiquiti Inc
Product
Dream Machines
Platforms
Unknown
Default status
unaffected
Dream Machines · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
5.1.19
Unavailable
None listed
Enterprise Fortress Gateway
Vendor
Ubiquiti Inc
Product
Enterprise Fortress Gateway
Platforms
Unknown
Default status
unaffected
Enterprise Fortress Gateway · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
5.1.19
Unavailable
None listed
Dream Wall
Vendor
Ubiquiti Inc
Product
Dream Wall
Platforms
Unknown
Default status
unaffected
Dream Wall · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
5.1.19
Unavailable
None listed
Dream Routers
Vendor
Ubiquiti Inc
Product
Dream Routers
Platforms
Unknown
Default status
unaffected
Dream Routers · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
5.1.19
Unavailable
None listed
Express 7
Vendor
Ubiquiti Inc
Product
Express 7
Platforms
Unknown
Default status
unaffected
Express 7 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
5.1.19
Unavailable
None listed
Cloud Gateways
Vendor
Ubiquiti Inc
Product
Cloud Gateways
Platforms
Unknown
Default status
unaffected
Cloud Gateways · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
5.1.19
Unavailable
None listed
Enterprise Firewall Core
Vendor
Ubiquiti Inc
Product
Enterprise Firewall Core
Platforms
Unknown
Default status
unaffected
Enterprise Firewall Core · Scoped product and version facts