CVE-2019-5456

2019-07-3020:19:48

CWE-300

hackerone

www.cve.org

AI Score

8.1

Confidence

High

EPSS

0.002

Percentile

61.6%

JSON

SMTP MITM refers to a malicious actor setting up an SMTP proxy server between the UniFi Controller version <= 5.10.21 and their actual SMTP server to record their SMTP credentials for malicious use later.

CNA Affected

[
  {
    "product": "UniFi",
    "vendor": "UniFi",
    "versions": [
      {
        "status": "affected",
        "version": "<= 5.10.21"
      }
    ]
  }
]