(Pwn2Own) Ubiquiti Networks UniFi Console Missing Authentication for Critical Function Authentication Bypass Vulnerability

🗓️ 11 Jun 2025 00:00:00Reported by SynacktivType

Ubiquiti Networks UniFi Console allows authentication bypass, risking access to connected devices.

Reporter	Title	Published	Views	Family All 19
BDU FSTEC	The vulnerability of the control interface of the UniFi Protect Camera system allows a intruder to execute arbitrary code and gain full control over the system.	25 Feb 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of UniFi Protect Camera systems lies in the lack of ability to update the firmware, allowing a violator to gain full control over the system.	25 Feb 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of UniFi Protect Camera systems, related to errors in the authentication process, allows a violator to gain full control over the system.	25 Feb 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of UniFi Protect Camera surveillance systems lies in the lack of measures to neutralize special elements, allowing violators to bypass security restrictions and execute arbitrary codes.	25 Feb 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Auto-Adopt Bridge Device function in the artificial intelligence-based video surveillance system UniFi Protect allows a violator to bypass security restrictions and gain full control over the system.	25 Feb 202500:00	–	bdu_fstec
Circl	CVE-2025-23116	21 Feb 202506:03	–	circl
CNNVD	Ubiquiti UniFi Protect Application 授权问题漏洞	1 Mar 202500:00	–	cnnvd
CNVD	Ubiquiti UniFi Protect Application Authentication Bypass Vulnerability	7 Mar 202500:00	–	cnvd
CVE	CVE-2025-23116	1 Mar 202501:52	–	cve
Cvelist	CVE-2025-23116	1 Mar 202501:52	–	cvelist