Description (CNA)
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Ubiquiti Inc / UniFi OS Server | affected 0 before 5.0.8 |
| Ubiquiti Inc / UDM | affected 0 before 5.1.12 |
| Ubiquiti Inc / UDM-Pro | affected 0 before 5.1.12 |
| Ubiquiti Inc / UDM-SE | affected 0 before 5.1.12 |
| Ubiquiti Inc / UDM-Pro-Max | affected 0 before 5.1.12 |
| Ubiquiti Inc / UDM-Beast | affected 0 before 5.1.11 |
| Ubiquiti Inc / EFG | affected 0 before 5.1.12 |
| Ubiquiti Inc / UDW | affected 0 before 5.1.12 |
| Ubiquiti Inc / UDR | affected 0 before 5.1.12 |
| Ubiquiti Inc / UDR7 | affected 0 before 5.1.12 |
| Ubiquiti Inc / UDR-5G | affected 0 before 5.1.12 |
| Ubiquiti Inc / Express 7 | affected 0 before 5.1.12 |
| Ubiquiti Inc / UNVR | affected 0 before 5.1.12 |
| Ubiquiti Inc / UNVR-Pro | affected 0 before 5.1.12 |
| Ubiquiti Inc / UNVR-Instant | affected 0 before 5.1.12 |
| Ubiquiti Inc / UNVR-G2 | affected 0 before 5.1.12 |
| Ubiquiti Inc / UNVR-G2-Pro | affected 0 before 5.1.12 |
| Ubiquiti Inc / ENVR | affected 0 before 5.1.12 |
| Ubiquiti Inc / ENVR-Core | affected 0 before 5.1.12 |
| Ubiquiti Inc / UNAS-2 | affected 0 before 5.1.10 |
| Ubiquiti Inc / UNAS-4 | affected 0 before 5.1.10 |
| Ubiquiti Inc / UNAS-Pro | affected 0 before 5.1.10 |
| Ubiquiti Inc / UNAS-Pro-4 | affected 0 before 5.1.10 |
| Ubiquiti Inc / UNAS-Pro-8 | affected 0 before 5.1.10 |
| Ubiquiti Inc / UCKP | affected 0 before 5.1.12 |
| Ubiquiti Inc / UCK | affected 0 before 5.1.12 |
| Ubiquiti Inc / UCK-Enterprise | affected 0 before 5.1.12 |
| Ubiquiti Inc / UCG-Ultra | affected 0 before 5.1.12 |
| Ubiquiti Inc / UCG-Max | affected 0 before 5.1.12 |
| Ubiquiti Inc / UCG-Fiber | affected 0 before 5.1.12 |
| Ubiquiti Inc / UCG-Industrial | affected 0 before 5.1.12 |
CWE
CWE-20
References
ADP enrichment
No English description supplied.