CVE-2020-8148

2020-04-1313:32:46

CWE-287

hackerone

www.cve.org

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.1%

JSON

UniFi Cloud Key firmware < 1.1.6 contains a vulnerability that enables an attacker being able to change a device hostname by sending a malicious API request. This affects Cloud Key gen2 and Cloud Key gen2 Plus.

CNA Affected

[
  {
    "product": "UniFi Cloud Key Gen2",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Fixed in firmware >= 1.1.10"
      }
    ]
  }
]