Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hf72-fxxw-c3jq

Опубликовано: 21 авг. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

A Missing Authentication for Critical Function vulnerability in the UniFi Connect EV Station Pro may allow a malicious actor with physical or adjacent access to perform an unauthorized factory reset.

Affected Products:

UniFi Connect EV Station Pro (Version 1.5.18 and earlier)

Mitigation:

Update UniFi Connect EV Station Pro to Version 1.5.27 or later

A Missing Authentication for Critical Function vulnerability in the UniFi Connect EV Station Pro may allow a malicious actor with physical or adjacent access to perform an unauthorized factory reset.

Affected Products:

UniFi Connect EV Station Pro (Version 1.5.18 and earlier)

Mitigation:

Update UniFi Connect EV Station Pro to Version 1.5.27 or later

EPSS

Процентиль: 22%
0.00072
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-306

Связанные уязвимости

CVSS3: 9.8
nvd
6 месяцев назад

A Missing Authentication for Critical Function vulnerability in the UniFi Connect EV Station Pro may allow a malicious actor with physical or adjacent access to perform an unauthorized factory reset. Affected Products: UniFi Connect EV Station Pro (Version 1.5.18 and earlier) Mitigation: Update UniFi Connect EV Station Pro to Version 1.5.27 or later

EPSS

Процентиль: 22%
0.00072
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-306