CVE-2024-34786

2024-07-0901:07:28

hackerone

github.com

unifi

ios

app

misconfiguration

access point

5ghz radio

vulnerability

AI Score

6.4

Confidence

Low

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

UniFi iOS app 10.15.0 introduces a misconfiguration on 2nd Generation UniFi Access Points configured as standalone (not using UniFi Network Application) that could cause the SSID name to change and/or the WiFi Password to be removed on the 5GHz Radio.

This vulnerability is fixed in UniFi iOS app 10.15.2 and later.

CNA Affected

[
  {
    "vendor": "Ubiquiti",
    "product": "UniFi iOS App",
    "versions": [
      {
        "status": "affected",
        "version": "10.15.2",
        "lessThan": "10.15.2",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]