CVE-2020-8148CWE-287

UniFi Cloud Key firmware < 1.1.6 contains a vulnerability that enables an attacker being able to change a device hostname by sending a malicious API request

published April 13, 2020

CVSS
—
EPSS
1%
Percentile
64.1
In the wild
Unconfirmed
What it is

UniFi Cloud Key firmware < 1.1.6 contains a vulnerability that enables an attacker being able to change a device hostname by sending a malicious API request. This affects Cloud Key gen2 and Cloud Key gen2 Plus.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01054 · 64.1th percentile
Weakness
CWE-287 · Improper Authentication
Published
2020-04-13T13:32Z
EPSS history
Timeline
  • 13 APR 13:32Z
    UniFi Cloud Key firmware < 1.1.6 contains a vulnerability that enables an attacker being able to change a device hostname by sending a malicious API request
    cvelistv5