Lucene search

K
hackeroneGianyH1:802079
HistoryFeb 21, 2020 - 9:29 p.m.

Ubiquiti Inc.: Unauthenticated request allows changing hostname

2020-02-2121:29:43
giany
hackerone.com
80

0.001 Low

EPSS

Percentile

38.1%

We have recently released new version of UniFi Cloud Key firmware that fixes a vulnerability found on v1.1.6 and prior for Cloud Key gen2 and Cloud Key gen2 Plus, according to the description below:

Unauthenticated API requests allow changing device hostname.

###Affected Products:
UniFi Cloud Key Gen2
UniFi Cloud Key Gen2 Plus

###Mitigation:
Update to latest UniFi Cloud key Gen2 and UniFi Cloud Key Gen2 Plus Firmware version available at UniFi Cloud Key Gen2 download page.

###Reference Link:
https://community.ui.com/releases/Security-advisory-bulletin-007-007/eb639fa0-68ad-4bf5-9663-3b760eb2f93a

0.001 Low

EPSS

Percentile

38.1%

Related for H1:802079