The vulnerability of the control interface of the UniFi Protect Camera system allows a intruder to execute arbitrary code and gain full control over the system.

🗓️ 25 Feb 2025 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

UniFi Protect Camera control interface has a memory after free flaw enabling remote attacker to execute code and take control.

Reporter	Title	Published	Views	Family All 28
BDU FSTEC	The vulnerability of UniFi Protect Camera systems lies in the lack of ability to update the firmware, allowing a violator to gain full control over the system.	25 Feb 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of UniFi Protect Camera systems, related to errors in the authentication process, allows a violator to gain full control over the system.	25 Feb 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of UniFi Protect Camera surveillance systems lies in the lack of measures to neutralize special elements, allowing violators to bypass security restrictions and execute arbitrary codes.	25 Feb 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Auto-Adopt Bridge Device function in the artificial intelligence-based video surveillance system UniFi Protect allows a violator to bypass security restrictions and gain full control over the system.	25 Feb 202500:00	–	bdu_fstec
Circl	CVE-2025-23115	21 Feb 202506:03	–	circl
Circl	CVE-2025-23116	21 Feb 202506:03	–	circl
CNNVD	Ubiquiti UniFi Protect Cameras 安全漏洞	1 Mar 202500:00	–	cnnvd
CNNVD	Ubiquiti UniFi Protect Application 授权问题漏洞	1 Mar 202500:00	–	cnnvd
CNVD	Ubiquiti UniFi Protect Cameras Post-Release Reuse Vulnerability	7 Mar 202500:00	–	cnvd
CNVD	Ubiquiti UniFi Protect Application Authentication Bypass Vulnerability	7 Mar 202500:00	–	cnvd

Vulners

Node

ubiquiti_networks unifi_protect_camerasRange≤4.74.88

Source	Link
community	www.community.ui.com/releases/Security-Advisory-Bulletin-046-046/9649ea8f-93db-4713-a875-c3fd7614943f
securityonline	www.securityonline.info/cve-2025-23115-cve-2025-23116-hackers-can-hijack-ubiquiti-unifi-protect-cameras/
web	www.web.nvd.nist.gov/view/vuln/detail

13 Aug 2025 00:00Current

8High risk

Vulners AI Score8

CVSS 27.6

CVSS 39

EPSS0.03428

UniFi Protect Camera memory after free remote attacker arbitrary code full control