The vulnerability of UniFi Protect Camera systems lies in the lack of ability to update the firmware, allowing a violator to gain full control over the system.

🗓️ 25 Feb 2025 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

UniFi Protect cameras cannot update firmware due to certificate verification flaws.

Reporter	Title	Published	Views	Family All 38
BDU FSTEC	The vulnerability of the control interface of the UniFi Protect Camera system allows a intruder to execute arbitrary code and gain full control over the system.	25 Feb 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of UniFi Protect Camera systems, related to errors in the authentication process, allows a violator to gain full control over the system.	25 Feb 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of UniFi Protect Camera surveillance systems lies in the lack of measures to neutralize special elements, allowing violators to bypass security restrictions and execute arbitrary codes.	25 Feb 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Auto-Adopt Bridge Device function in the artificial intelligence-based video surveillance system UniFi Protect allows a violator to bypass security restrictions and gain full control over the system.	25 Feb 202500:00	–	bdu_fstec
Circl	CVE-2025-23115	21 Feb 202506:03	–	circl
Circl	CVE-2025-23116	21 Feb 202506:03	–	circl
Circl	CVE-2025-23117	1 Mar 202502:27	–	circl
CNNVD	Ubiquiti UniFi Protect Cameras 安全漏洞	1 Mar 202500:00	–	cnnvd
CNNVD	Ubiquiti UniFi Protect Cameras 安全漏洞	1 Mar 202500:00	–	cnnvd
CNNVD	Ubiquiti UniFi Protect Application 授权问题漏洞	1 Mar 202500:00	–	cnnvd

Vulners

Node

ubiquiti_networks unifi_protect_camerasRange≤4.74.88

Source	Link
community	www.community.ui.com/releases/Security-Advisory-Bulletin-046-046/9649ea8f-93db-4713-a875-c3fd7614943f
securityonline	www.securityonline.info/cve-2025-23115-cve-2025-23116-hackers-can-hijack-ubiquiti-unifi-protect-cameras/
web	www.web.nvd.nist.gov/view/vuln/detail

25 Feb 2025 00:00Current

7.5High risk

Vulners AI Score7.5

CVSS 36.8

CVSS 27.7

EPSS0.03428

UniFi Protect cameras certificate verification flaws firmware update remote attacker full control