CVE-2024-34786

2024-07-0902:15:10

hackerone

web.nvd.nist.gov

unifi

ios

misconfiguration

vulnerability

2nd generation

access points

wifi password

AI Score

6.1

Confidence

Low

EPSS

Percentile

9.2%

JSON

UniFi iOS app 10.15.0 introduces a misconfiguration on 2nd Generation UniFi Access Points configured as standalone (not using UniFi Network Application) that could cause the SSID name to change and/or the WiFi Password to be removed on the 5GHz Radio.

This vulnerability is fixed in UniFi iOS app 10.15.2 and later.

Affected configurations

Vulners

Node

ubiquitiunifi_ios_appRange<10.15.2

VendorProductVersionCPE
ubiquitiunifi_ios_app*cpe:2.3:a:ubiquiti:unifi_ios_app:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ubiquiti	unifi_ios_app	*	cpe:2.3:a:ubiquiti:unifi_ios_app::::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "vendor": "Ubiquiti",
    "product": "UniFi iOS App",
    "versions": [
      {
        "version": "10.15.2",
        "status": "affected",
        "lessThan": "10.15.2",
        "versionType": "semver"
      }
    ]
  }
]