CVE-2023-41721

Instances of UniFi Network Application that i are run on a UniFi Gateway Console, and ii are versions 7.5.176. and earlier, implement device adoption with improper access control logic, creating a risk of access to device configuration information by a malicious actor with preexisting access to t...

CVE-2023-41721

CVE-2023-41721: Affects UniFi Network Application run on a UniFi Gateway Console with versions 7.5.176 and earlier, exposing an improper access control flaw in device adoption. This could allow a malicious actor with preexisting network access to reach device configuration information. Affected p...

CVE-2023-41721: Improper Access Control

Instances of UniFi Network Application that i are run on a UniFi Gateway Console, and ii are versions 7.5.176. and earlier, implement device adoption with improper access control logic, creating a risk of access to device configuration information by a malicious actor with preexisting access to t...

CVE-2020-8267

A security issue was found in UniFi Protect controller v1.14.10 and earlier.The authentication in the UniFi Protect controller API was using “x-token” improperly, allowing attackers to use the API to send authenticated messages without a valid token.This vulnerability was fixed in UniFi Protect...

CVE-2020-8267

A security issue was found in UniFi Protect controller v1.14.10 and earlier.The authentication in the UniFi Protect controller API was using “x-token” improperly, allowing attackers to use the API to send authenticated messages without a valid token.This vulnerability was fixed in UniFi Protect...

Security feature bypass

A security issue was found in UniFi Protect controller v1.14.10 and earlier.The authentication in the UniFi Protect controller API was using “x-token” improperly, allowing attackers to use the API to send authenticated messages without a valid token.This vulnerability was fixed in UniFi Protect...

CVE-2020-8267

A security issue was found in UniFi Protect controller v1.14.10 and earlier.The authentication in the UniFi Protect controller API was using “x-token” improperly, allowing attackers to use the API to send authenticated messages without a valid token.This vulnerability was fixed in UniFi Protect...

CVE-2020-8267

CVE-2020-8267 affects UniFi Protect controller up to v1.14.10. The root cause is improper use of the access token in the controller API, allowing attackers to send authenticated messages without a valid token. The issue is fixed in UniFi Protect v1.14.11 and newer. Impact notes: it does not affec...

CVE-2020-8267: Improper Authentication

A security issue was found in UniFi Protect controller v1.14.10 and earlier.The authentication in the UniFi Protect controller API was using “x-token” improperly, allowing attackers to use the API to send authenticated messages without a valid token.This vulnerability was fixed in UniFi Protect...

PT-2020-20071

Name of the Vulnerable Software and Affected Versions UniFi Protect versions 1.14.10 and earlier UDM-Pro firmware versions 1.7.2 and earlier UNVR firmware versions 1.3.12 and earlier Description A security issue was found in the UniFi Protect controller API, where the authentication was using...