Ubiquiti has released urgent security updates for 22 vulnerabilities across its UniFi ecosystem. Twenty-one of the flaws carry Critical severity ratings, with several allowing attackers on a reachable network to bypass authentication, escalate privileges or run commands.
The Ubiquiti UniFi vulnerabilities affect UniFi OS and a wide range of products, including gateways, routers, storage systems, network video recorders and security-management applications. Ubiquiti has not reported active exploitation, but users should apply the available updates as soon as possible.
Critical flaws affect UniFi OS devices
UniFi OS sits at the centre of Ubiquiti’s ecosystem and powers many of its hardware products. The advisory warns that attackers with network access could exploit some flaws without needing an account, user interaction or complex attack steps.
One of the most severe issues involves improper handling of CRLF sequences. According to Ubiquiti, this flaw could allow a network-based attacker to bypass authentication on affected UniFi OS devices or instances.
Other UniFi OS bugs, rated 9.9 out of 10, could let low-privileged attackers elevate their access to full control of the affected system.
Protect and Talk include perfect 10 vulnerabilities
The patch also addresses two flaws with maximum CVSS scores of 10.0.
A critical issue in the UniFi Protect Application could allow an unauthenticated attacker to execute injected commands. UniFi Protect manages video surveillance and security systems, which makes the vulnerability especially significant for organisations using connected cameras and recorders.
UniFi Talk, Ubiquiti’s VoIP platform, contains a separate 10.0-rated input-validation flaw. An attacker with network access could exploit it to execute arbitrary commands.
Broad product range may be exposed
The Ubiquiti UniFi vulnerabilities extend beyond a single product family. Potentially affected systems include Cloud Keys, Network Video Recorders, Enterprise Network Video Recorders, network-attached storage devices, Dream Machines, Dream Routers, Cloud Gateways, Dream Wall and other UniFi hardware.
The advisory also includes a 9.8-rated unauthenticated command-injection vulnerability in the UniFi Enterprise Audio/Video Bridge.
Meanwhile, UniFi Access contains four critical flaws that could allow a low-privileged attacker to escalate privileges on the host device. The application is used to manage physical access controls, including connected door systems.
Ubiquiti urges immediate updates
Ubiquiti said users should update affected software and devices immediately. UniFi OS Server should receive particular attention due to its central role in managing deployments.
The company has issued alerts for serious UniFi flaws earlier this year, including vulnerabilities that were reportedly exploited before patches became widely available. Although Ubiquiti has not identified active attacks involving this latest set of flaws, the high severity and wide product impact could attract rapid interest from threat actors.
0 responses to “Ubiquiti Patches 21 Critical UniFi Vulnerabilities”