Default credentials

Ubiquiti UCRM versions 2.3.0 to 2.7.7 allow an authenticated user to read arbitrary files in the local file system. Note that by default, the local file system is isolated in a docker container. Successful exploitation requires valid credentials to an account with "Edit" access to "System...

CVE-2017-0912

Ubiquiti UCRM versions 2.5.0 to 2.7.7 are vulnerable to Stored Cross-site Scripting. Due to the lack sanitization, it is possible to inject arbitrary HTML code by manipulating the uploaded filename. Successful exploitation requires valid credentials to an account with "Edit" access to "Scheduling...

CVE-2017-0912

CVE-2017-0912 affects Ubiquiti UCRM versions 2.5.0 to 2.7.7. The vulnerability is a stored Cross-site Scripting (XSS) flaw caused by insufficient sanitization, enabling injection of arbitrary HTML via the uploaded filename. Exploitation requires valid credentials and an account with Edit access t...

CVE-2017-0913

CVE-2017-0913 affects Ubiquiti UCRM versions 2.3.0–2.7.7. An authenticated user with Edit access to System Customization can read arbitrary files on the local filesystem; note that the container runs in Docker isolation by default. Exploitation requires valid credentials; no exploit details are p...

CVE-2017-0913

Ubiquiti UCRM versions 2.3.0 to 2.7.7 allow an authenticated user to read arbitrary files in the local file system. Note that by default, the local file system is isolated in a docker container. Successful exploitation requires valid credentials to an account with "Edit" access to "System...

Ubiquiti Inc.: Privilege escalation in the client impersonation functionality

In UCRM 2.3.0-beta4 and prior, consequence of a lack of validation in Client Impersonation functionality, an attacker with access to an Read-Only account can escalate privileges to Admin. The vulnerability was fixed in UCRM 2.3.0...