CVE-2021-22952CWE-94

A vulnerability found in UniFi Talk application V1.12.3 and earlier permits a malicious actor who has already gained access to a network to subsequently…

published September 23, 2021

CVSS
—
EPSS
1%
Percentile
63.2
In the wild
Unconfirmed
What it is

A vulnerability found in UniFi Talk application V1.12.3 and earlier permits a malicious actor who has already gained access to a network to subsequently control Talk device(s) assigned to said network if they are not yet adopted. This vulnerability is fixed in UniFi Talk application V1.12.5 and later.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01023 · 63.2th percentile
Weakness
CWE-94 · Improper Control of Generation of Code ('Code Injection')
Published
2021-09-23T12:41Z
EPSS history
Timeline
  • 23 SEP 12:41Z
    A vulnerability found in UniFi Talk application V1.12.3 and earlier permits a malicious actor who has already gained access to a network to subsequently…
    cvelistv5