CVE-2018-5264

CVE-2018-5264 affects Ubiquiti UniFi 52 devices in hotspot mode. An attacker can bypass the intended 'free time' Wi‑Fi restrictions by requesting /guest/s/default/ to obtain a cookie, then using that cookie in /guest/s/default/login with the byfree parameter. CVSS metrics in the record indicate a...