Browse CVEs

MEDIUM 5.3 CVE-2022-44565 An improper access validation vulnerability exists in airMAX AC <8.7.11, airFiber 60/LR <2.6.2, airFiber 60 XG/HD <v1.0.0 and airFiber GBE <1.4.1 tha… Airfiber Gigabeam Firmware 1.0.0 / 1.4.1+ Fix from $1,6002022-12-23 HIGH 8.8 CVE-2022-43553 A remote code execution vulnerability in EdgeRouters (Version 2.0.9-hotfix.4 and earlier) allows a malicious actor with an operator account to run ar… Edgemax Edgerouter Firmware 2.0.9+ Fix from $1,9502022-12-05 HIGH 7.8 CVE-2022-35257 A local privilege escalation vulnerability in UI Desktop for Windows (Version 0.55.1.2 and earlier) allows a malicious actor with local access to a W… Desktop 0.55.3.17+ Fix from $1,9502022-09-23 CRITICAL 10.0 CVE-2022-22570 A buffer overflow vulnerability found in the UniFi Door Access Reader Lite’s (UA Lite) firmware (Version 3.8.28.24 and earlier) allows a malicious ac… Ua Lite Firmware 3.8.31.13+ Fix from $2,3002022-04-01 CRITICAL 9.8 CVE-2021-44530 An injection vulnerability exists in a third-party library used in UniFi Network Version 6.5.53 and earlier (Log4J CVE-2021-44228) allows a malicious… Unifi Network Controller after 6.5.53 Fix from $2,3002022-01-14 MEDIUM 6.5 CVE-2021-44527 A vulnerability found in UniFi Switch firmware Version 5.43.35 and earlier allows a malicious actor who has already gained access to the network to p… Unifi Switch Firmware 5.76.6+ Fix from $1,6002021-12-07 HIGH 8.8 CVE-2021-22957 A Cross-Origin Resource Sharing (CORS) vulnerability found in UniFi Protect application Version 1.19.2 and earlier allows a malicious actor who has c… Unifi Protect 1.20.0+ Fix from $1,9502021-11-24 HIGH 8.8 CVE-2021-22952 A vulnerability found in UniFi Talk application V1.12.3 and earlier permits a malicious actor who has already gained access to a network to subsequen… Unifi Talk after 1.12.3 Fix from $1,9502021-09-23 CRITICAL 9.6 CVE-2021-22943 A vulnerability found in UniFi Protect application V1.18.1 and earlier permits a malicious actor who has already gained access to a network to subseq… Unifi Protect 1.19.0+ Fix from $2,3002021-08-31 HIGH 8.0 CVE-2021-22944 A vulnerability found in UniFi Protect application V1.18.1 and earlier allows a malicious actor with a view-only role and network access to gain the … Unifi Protect 1.19.0+ Fix from $1,9502021-08-31 HIGH 7.5 CVE-2021-33818 An issue was discovered in UniFi Protect G3 FLEX Camera Version UVC.v4.30.0.67. Attackers can use slowhttptest tool to send incomplete HTTP request, … Camera G3 Flex Firmware No fix yet Fix from $1,9502021-06-18 HIGH 7.5 CVE-2021-33820 An issue was discovered in UniFi Protect G3 FLEX Camera Version UVC.v4.30.0.67.Attacker could send a huge amount of TCP SYN packet to make web servic… Camera G3 Flex Firmware No fix yet Fix from $1,9502021-06-18 HIGH 7.5 CVE-2021-22909 A vulnerability found in EdgeMAX EdgeRouter V2.0.9 and earlier could allow a malicious actor to execute a man-in-the-middle (MitM) attack during a fi… Edgemax Edgerouter Firmware after 2.0.9 Fix from $1,9502021-05-27 HIGH 7.8 CVE-2020-24755 In Ubiquiti UniFi Video v3.10.13, when the executable starts, its first library validation is in the current directory. This allows the impersonation… Unifi Video No fix yet Fix from $1,9502021-05-17 HIGH 7.5 CVE-2021-22882 UniFi Protect before v1.17.1 allows an attacker to use spoofed cameras to perform a denial-of-service attack that may cause the UniFi Protect control… Unifi Protect Controller 1.17.1+ Fix from $1,9502021-02-23 HIGH 8.8 CVE-2020-8282 A security issue was found in EdgePower 24V/54V firmware v1.7.0 and earlier where, due to missing CSRF protections, an attacker would have been able … Edgemax Edgepower 24v Firmware after 1.7.0 Fix from $1,9502020-12-14 MEDIUM 5.3 CVE-2020-8267 A security issue was found in UniFi Protect controller v1.14.10 and earlier.The authentication in the UniFi Protect controller API was using “x-token… Unifi Protect Firmware after 1.14.10 Fix from $1,6002020-11-05 HIGH 7.5 CVE-2020-27888 An issue was discovered on Ubiquiti UniFi Meshing Access Point UAP-AC-M 4.3.21.11325 and UniFi Controller 6.0.28 devices. Cached credentials are not … Unifi Meshing Access Point Firmware Mitigation only Fix from $1,9502020-10-27 CRITICAL 9.8 CVE-2020-8234 A vulnerability exists in The EdgeMax EdgeSwitch firmware <v1.9.1 where the EdgeSwitch legacy web interface SIDSSL cookie for admin can be guessed, e… Edgemax Firmware 1.9.1+ Fix from $2,3002020-08-21 HIGH 8.8 CVE-2020-8233 A command injection vulnerability exists in EdgeSwitch firmware <v1.9.0 that allowed an authenticated read-only user to execute arbitrary shell comma… Edgeswitch Firmware 1.9.0+ Fix from $1,9502020-08-17 MEDIUM 6.5 CVE-2020-8232 An information disclosure vulnerability exists in EdgeMax EdgeSwitch firmware v1.9.0 that allowed read only users could obtain unauthorized informati… Edgeswitch Firmware 1.9.0+ Fix from $1,6002020-08-17 MEDIUM 5.3 CVE-2020-8213 An information exposure vulnerability exists in UniFi Protect before v1.13.4-beta.5 that allowed unauthenticated attackers access to valid usernames … Unifi Protect after 1.13.3 Fix from $1,6002020-07-30 HIGH 8.8 CVE-2020-8188 We have recently released new version of UniFi Protect firmware v1.13.3 and v1.14.10 for Unifi Cloud Key Gen2 Plus and UniFi Dream Machine Pro/UNVR r… Unifi Protect Firmware after 1.14.9 Fix from $1,9502020-07-02 CRITICAL 9.8 CVE-2020-8171 We have recently released new version of AirMax AirOS firmware v6.3.0 for TI, XW and XM boards that fixes vulnerabilities found on AirMax AirOS v6.2.… Airos after 6.2.0 Fix from $2,3002020-05-26 HIGH 8.8 CVE-2020-8168 We have recently released new version of AirMax AirOS firmware v6.3.0 for TI, XW and XM boards that fixes vulnerabilities found on AirMax AirOS v6.2.… Airos after 6.2.0 Fix from $1,9502020-05-26 MEDIUM 6.1 CVE-2020-8170 We have recently released new version of AirMax AirOS firmware v6.3.0 for TI, XW and XM boards that fixes vulnerabilities found on AirMax AirOS v6.2.… Airos after 6.2.0 Fix from $1,6002020-05-26 MEDIUM 6.8 CVE-2020-8157 UniFi Cloud Key firmware <= v1.1.10 for Cloud Key gen2 and Cloud Key gen2 Plus contains a vulnerability that allows unrestricted root access through … Unifi Cloud Key Gen2 Firmware after 1.1.10 Fix from $1,6002020-05-02 MEDIUM 5.3 CVE-2020-8148 UniFi Cloud Key firmware < 1.1.6 contains a vulnerability that enables an attacker being able to change a device hostname by sending a malicious API … Cloud Key Gen2 after 1.1.6 Fix from $1,6002020-04-13 HIGH 8.4 CVE-2020-8144 The UniFi Video Server v3.9.3 and prior (for Windows 7/8/10 x64) web interface Firmware Update functionality, under certain circumstances, does not v… Unifi Video after 3.9.3 Fix from $1,9502020-04-01 HIGH 7.8 CVE-2020-8146 In UniFi Video v3.10.1 (for Windows 7/8/10 x64) there is a Local Privileges Escalation to SYSTEM from arbitrary file deletion and DLL hijack vulnerab… Unifi Video after 3.10.2 Fix from $1,9502020-04-01