ui Vulnerability Advisory Catalog

Total 118 security vulnerabilities recorded for ui software and firmware.

← Back to All Vendors
Component: er-x_firmware

A security vulnerability has been detected in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. The affected element is an unknown function of the component...

๐Ÿ“… 2023-04-28
CVSS 7.2 Dossier →
Component: er-x_firmware

A weakness has been identified in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. Impacted is an unknown function of the component Web Management Interfac...

๐Ÿ“… 2023-04-28
CVSS 7.2 Dossier →
Component: er-x_firmware

A security flaw has been discovered in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. This issue affects some unknown processing of the component Web Man...

๐Ÿ“… 2023-04-28
CVSS 7.2 Dossier →
Component: edgemax_edgerouter_firmware

A vulnerability was identified in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. This vulnerability affects unknown code of the component Web Management ...

๐Ÿ“… 2023-04-28
CVSS 7.2 Dossier →
Component: desktop

Improper usage of symmetric encryption in UI Desktop for Windows (Version 0.59.1.71 and earlier) could allow users with access to UI Desktop configura...

๐Ÿ“… 2023-04-19
CVSS 5.5 Dossier →
Component: desktop

A permission misconfiguration in UI Desktop for Windows (Version 0.59.1.71 and earlier) could allow an user to hijack VPN credentials while UID VPN is...

๐Ÿ“… 2023-04-19
CVSS 5.5 Dossier →
Component: desktop

A local privilege escalation (LPE) vulnerability in UI Desktop for Windows (Version 0.59.1.71 and earlier) allows a malicious actor with local access ...

๐Ÿ“… 2023-04-19
CVSS 7.8 Dossier →
Component: edgerouter_x_firmware

A vulnerability has been found in Ubiquiti EdgeRouter X 2.0.9-hotfix.6 and classified as critical. Affected by this vulnerability is an unknown functi...

๐Ÿ“… 2023-03-25
CVSS 7.2 Dossier →
Component: edgerouter_x_firmware

A vulnerability, which was classified as critical, was found in Ubiquiti EdgeRouter X 2.0.9-hotfix.6. Affected is an unknown function of the component...

๐Ÿ“… 2023-03-25
CVSS 7.2 Dossier →
Component: edgerouter_x_firmware

A vulnerability, which was classified as critical, has been found in Ubiquiti EdgeRouter X 2.0.9-hotfix.6. This issue affects some unknown processing ...

๐Ÿ“… 2023-03-25
CVSS 7.2 Dossier →
CVE-2023-24104 CRITICAL
Component: unifi_dream_machine_pro_firmware

Ubiquiti Networks UniFi Dream Machine Pro v7.2.95 allows attackers to bypass domain restrictions via crafted packets....

๐Ÿ“… 2023-02-23
CVSS 9.8 Dossier →
Component: usg_firmware

A vulnerability, found in EdgeRouters Version 2.0.9-hotfix.5 and earlier and UniFi Security Gateways (USG) Version 4.4.56 and earlier with their DHCPv...

๐Ÿ“… 2023-02-09
CVSS 8.8 Dossier →
Component: af-2x_firmware

The use of the cyclic redundancy check (CRC) algorithm for integrity check during firmware update makes Ubiquiti airFiber AF2X Radio firmware version ...

๐Ÿ“… 2023-02-02
CVSS 5.9 Dossier →
Component: airfiber_gigabeam_firmware

An improper access validation vulnerability exists in airMAX AC <8.7.11, airFiber 60/LR <2.6.2, airFiber 60 XG/HD <v1.0.0 and airFiber GBE <1.4.1 that...

๐Ÿ“… 2022-12-23
CVSS 5.3 Dossier →
Component: edgemax_edgerouter_firmware

A remote code execution vulnerability in EdgeRouters (Version 2.0.9-hotfix.4 and earlier) allows a malicious actor with an operator account to run arb...

๐Ÿ“… 2022-12-05
CVSS 8.8 Dossier →
Component: desktop

A local privilege escalation vulnerability in UI Desktop for Windows (Version 0.55.1.2 and earlier) allows a malicious actor with local access to a Wi...

๐Ÿ“… 2022-09-23
CVSS 7.8 Dossier →
CVE-2022-22570 CRITICAL
Component: ua_lite_firmware

A buffer overflow vulnerability found in the UniFi Door Access Reader Liteโ€™s (UA Lite) firmware (Version 3.8.28.24 and earlier) allows a malicious act...

๐Ÿ“… 2022-04-01
CVSS 10.0 Dossier →
CVE-2021-44530 CRITICAL
Component: unifi_network_controller

An injection vulnerability exists in a third-party library used in UniFi Network Version 6.5.53 and earlier (Log4J CVE-2021-44228) allows a malicious ...

๐Ÿ“… 2022-01-14
CVSS 9.8 Dossier →
Component: unifi_switch_firmware

A vulnerability found in UniFi Switch firmware Version 5.43.35 and earlier allows a malicious actor who has already gained access to the network to pe...

๐Ÿ“… 2021-12-07
CVSS 6.5 Dossier →
Component: unifi_protect

A Cross-Origin Resource Sharing (CORS) vulnerability found in UniFi Protect application Version 1.19.2 and earlier allows a malicious actor who has co...

๐Ÿ“… 2021-11-24
CVSS 8.8 Dossier →
Component: unifi_talk

A vulnerability found in UniFi Talk application V1.12.3 and earlier permits a malicious actor who has already gained access to a network to subsequent...

๐Ÿ“… 2021-09-23
CVSS 8.8 Dossier →
Component: unifi_protect

A vulnerability found in UniFi Protect application V1.18.1 and earlier allows a malicious actor with a view-only role and network access to gain the s...

๐Ÿ“… 2021-08-31
CVSS 8.0 Dossier →
CVE-2021-22943 CRITICAL
Component: unifi_protect

A vulnerability found in UniFi Protect application V1.18.1 and earlier permits a malicious actor who has already gained access to a network to subsequ...

๐Ÿ“… 2021-08-31
CVSS 9.6 Dossier →
Component: camera_g3_flex_firmware

An issue was discovered in UniFi Protect G3 FLEX Camera Version UVC.v4.30.0.67.Attacker could send a huge amount of TCP SYN packet to make web service...

๐Ÿ“… 2021-06-18
CVSS 7.5 Dossier →
Page 3 of 5 (118 Total Records)