Description (CNA)
A misconfigured query in UniFi Network (v9.1.120 and earlier) could allow users to authenticate to Enterprise WiFi or VPN Server (l2tp and OpenVPN) using a device’s MAC address from 802.1X or MAC Authentication, if both services are enabled and share the same RADIUS profile.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Ubiquiti Inc / UniFi Network Application | affected 9.2.87 before 9.2.87 |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.
No references supplied.