Vulnerabilities > UI
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-03-25 | CVE-2023-1457 | Command Injection vulnerability in UI Edgerouter X Firmware 2.0.9 A vulnerability, which was classified as critical, was found in Ubiquiti EdgeRouter X 2.0.9-hotfix.6. | 9.8 |
| 2023-02-23 | CVE-2023-24104 | Unspecified vulnerability in UI Unifi Dream Machine PRO Firmware 7.2.95 Ubiquiti Networks UniFi Dream Machine Pro v7.2.95 allows attackers to bypass domain restrictions via crafted packets. | 9.8 |
| 2023-02-09 | CVE-2023-23912 | Code Injection vulnerability in UI products A vulnerability, found in EdgeRouters Version 2.0.9-hotfix.5 and earlier and UniFi Security Gateways (USG) Version 4.4.56 and earlier with their DHCPv6 prefix delegation set to dhcpv6-stateless or dhcpv6-stateful, allows a malicious actor directly connected to the WAN interface of an affected device to create a remote code execution vulnerability. | 8.8 |
| 2023-02-02 | CVE-2023-23119 | Improper Validation of Integrity Check Value vulnerability in UI Af-2X Firmware The use of the cyclic redundancy check (CRC) algorithm for integrity check during firmware update makes Ubiquiti airFiber AF2X Radio firmware version 3.2.2 and earlier vulnerable to firmware modification attacks. | 5.9 |
| 2022-12-23 | CVE-2022-44565 | Unspecified vulnerability in UI products An improper access validation vulnerability exists in airMAX AC <8.7.11, airFiber 60/LR <2.6.2, airFiber 60 XG/HD <v1.0.0 and airFiber GBE <1.4.1 that allows a malicious actor to retrieve status and usage data from the UISP device. | 5.3 |
| 2022-12-05 | CVE-2022-43553 | Unspecified vulnerability in UI Edgemax Edgerouter Firmware 2.0.9 A remote code execution vulnerability in EdgeRouters (Version 2.0.9-hotfix.4 and earlier) allows a malicious actor with an operator account to run arbitrary administrator commands.This vulnerability is fixed in Version 2.0.9-hotfix.5 and later. | 8.8 |
| 2022-09-23 | CVE-2022-35257 | Unspecified vulnerability in UI Desktop 0.55.1.2 A local privilege escalation vulnerability in UI Desktop for Windows (Version 0.55.1.2 and earlier) allows a malicious actor with local access to a Windows device with UI Desktop to run arbitrary commands as SYSTEM. | 7.8 |
| 2022-04-01 | CVE-2022-22570 | Classic Buffer Overflow vulnerability in UI UA Lite Firmware 3.8.28.20/3.8.28.24 A buffer overflow vulnerability found in the UniFi Door Access Reader Lite’s (UA Lite) firmware (Version 3.8.28.24 and earlier) allows a malicious actor who has gained access to a network to control all connected UA devices. | 10.0 |
| 2022-01-14 | CVE-2021-44530 | Injection vulnerability in UI Unifi Network Controller An injection vulnerability exists in a third-party library used in UniFi Network Version 6.5.53 and earlier (Log4J CVE-2021-44228) allows a malicious actor to control the application. | 9.8 |
| 2021-12-07 | CVE-2021-44527 | Resource Exhaustion vulnerability in UI Unifi Switch Firmware A vulnerability found in UniFi Switch firmware Version 5.43.35 and earlier allows a malicious actor who has already gained access to the network to perform a Deny of Service (DoS) attack on the affected switch.This vulnerability is fixed in UniFi Switch firmware 5.76.6 and later. | 6.5 |