A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
UniFi OS Server
Vendor
Ubiquiti Inc
Product
UniFi OS Server
Platforms
Unknown
Default status
unaffected
UniFi OS Server · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
5.1.37
Unavailable
None listed
Cloud Keys
Vendor
Ubiquiti Inc
Product
Cloud Keys
Platforms
Unknown
Default status
unaffected
Cloud Keys · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
5.1.31
Unavailable
None listed
Network Video Recorders
Vendor
Ubiquiti Inc
Product
Network Video Recorders
Platforms
Unknown
Default status
unaffected
Network Video Recorders · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
5.1.31
Unavailable
None listed
Enterprise Network Video Recorders
Vendor
Ubiquiti Inc
Product
Enterprise Network Video Recorders
Platforms
Unknown
Default status
unaffected
Enterprise Network Video Recorders · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
5.1.31
Unavailable
None listed
Enterprise Network Attached Storage
Vendor
Ubiquiti Inc
Product
Enterprise Network Attached Storage
Platforms
Unknown
Default status
unaffected
Enterprise Network Attached Storage · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
5.1.31
Unavailable
None listed
Dream Machines
Vendor
Ubiquiti Inc
Product
Dream Machines
Platforms
Unknown
Default status
unaffected
Dream Machines · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
5.1.31
Unavailable
None listed
Enterprise Firewall Core
Vendor
Ubiquiti Inc
Product
Enterprise Firewall Core
Platforms
Unknown
Default status
unaffected
Enterprise Firewall Core · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
5.1.31
Unavailable
None listed
Dream Routers
Vendor
Ubiquiti Inc
Product
Dream Routers
Platforms
Unknown
Default status
unaffected
Dream Routers · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
5.1.31
Unavailable
None listed
Enterprise Fortress Gateway
Vendor
Ubiquiti Inc
Product
Enterprise Fortress Gateway
Platforms
Unknown
Default status
unaffected
Enterprise Fortress Gateway · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
5.1.31
Unavailable
None listed
Cloud Gateways
Vendor
Ubiquiti Inc
Product
Cloud Gateways
Platforms
Unknown
Default status
unaffected
Cloud Gateways · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
5.1.31
Unavailable
None listed
Dream Wall
Vendor
Ubiquiti Inc
Product
Dream Wall
Platforms
Unknown
Default status
unaffected
Dream Wall · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
5.1.31
Unavailable
None listed
Express 7
Vendor
Ubiquiti Inc
Product
Express 7
Platforms
Unknown
Default status
unaffected
Express 7 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
semver
5.1.31
Unavailable
None listed
Network Attached Storage
Vendor
Ubiquiti Inc
Product
Network Attached Storage
Platforms
Unknown
Default status
unaffected
Network Attached Storage · Scoped product and version facts