Vulnerabilidades de Ubiquiti Inc

A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Access Application to escalate privileges on the host device.

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device.

A malicious actor with access to the network and low privileges could exploit a series of authenticated SQL Injection vulnerabilities found in UniFi Talk Application to escalate privileges on the host device.

A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Connect Application to execute a Command Injection on the host device.

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in certain devices running UniFi OS to execute a Command Injection within such UniFi OS devices or instances.

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances.

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UID Enterprise Agent to execute a Command Injection on the host device.

A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi OS devices to make unauthorized changes to the system.

A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system that could be manipulated to access an underlying account.

A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection.

A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection.

Uma vulnerabilidade de Controle de Acesso Inadequado pode permitir que um agente malicioso com acesso à rede UniFi Play habilite SSH para realizar alterações não autorizadas no sistema. Produtos afetados: UniFi Play PowerAmp (Versão 1.0.35 e anteriores) UniFi Play Audio Port (Versão 1.0.24 e anteriores) Mitigação: Atualize o UniFi Play PowerAmp para a Versão 1.0.38 ou posterior Atualize o UniFi Play Audio Port para a Versão 1.1.9 ou posterior

Uma série de vulnerabilidades de Validação Imprópria de Entrada podem permitir uma Injeção de Comando por um agente malicioso com acesso à rede UniFi Play. Produtos Afetados: UniFi Play PowerAmp (Versão 1.0.35 e anteriores) UniFi Play Audio Port (Versão 1.0.24 e anteriores). Mitigação: Atualize o UniFi Play PowerAmp para a Versão 1.0.38 ou posterior. Atualize o UniFi Play Audio Port para a Versão 1.1.9 ou posterior.

Um agente malicioso com acesso à rede UniFi Play poderia explorar uma vulnerabilidade de Path Traversal encontrada no firmware do dispositivo para gravar arquivos no sistema, que poderiam ser usados para execução remota de código (RCE). Produtos afetados: UniFi Play PowerAmp (Versão 1.0.35 e anteriores)\u2028UniFi Play Audio Port (Versão 1.0.24 e anteriores)\u2028 Mitigação: Atualize o UniFi Play PowerAmp para a Versão 1.0.38 ou posterior\u2028Atualize o UniFi Play Audio Port para a Versão 1.1.9 ou posterior