Описание
A malicious actor with access to the network and under certain network configurations could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to make unauthorized changes to such UniFi OS devices.
Уязвимые конфигурации
Конфигурация 1Версия до 3.4.20 (исключая)
cpe:2.3:a:ui:unifi_connect:*:*:*:*:*:*:*:*
EPSS
Процентиль: 35%
0.00412
Низкий
9 Critical
CVSS3
9.8 Critical
CVSS3
Дефекты
CWE-284
NVD-CWE-Other
Связанные уязвимости
CVSS3: 9
github
3 месяца назад
A malicious actor with access to the network and under certain network configurations could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to make unauthorized changes to such UniFi OS devices.
EPSS
Процентиль: 35%
0.00412
Низкий
9 Critical
CVSS3
9.8 Critical
CVSS3
Дефекты
CWE-284
NVD-CWE-Other