CVE-2023-24104

Ubiquiti Networks UniFi Dream Machine Pro v7.2.95 allows attackers to bypass domain restrictions via crafted packets

Critical · published February 23, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
57.6
In the wild
Unconfirmed
What it is

🔥 Attackers can bypass domain restrictions with nothing more than a few crafted packets! This is a juicy hole in Ubiquiti Networks UniFi Dream Machine Pro v7.2.95 that needs your attention! Think of it like a club with a strict guest list, but someone walks in using a fake invitation — the front desk doesn't even check! This vulnerability allows unrestricted access as if the bouncers decided to take a break. The consequences could be absolutely devastating! An attacker could gain unauthorized access to restricted areas of your network, potentially spying on sensitive data or sabotaging your setup. Imagine all your confidential conversations and critical configurations exposed!

Put simply

Think of it like a club with a strict guest list, but someone walks in using a fake invitation — the front desk doesn't even check! This vulnerability allows unrestricted access as if the bouncers decided to take a break. This vulnerability allows attackers to forge packets to bypass domain restrictions, meaning they can access areas they shouldn't. Essentially, it's like tricking the system into thinking you're part of the exclusive group when you're definitely not!

What to do

The consequences could be absolutely devastating! An attacker could gain unauthorized access to restricted areas of your network, potentially spying on sensitive data or sabotaging your setup. Imagine all your confidential conversations and critical configurations exposed! To secure your system, immediately patch to version 7.2.96 or later. Additionally, review your network configurations and consider implementing stricter packet inspection rules to bolster security. You've got this! Follow these steps to secure your network fortress! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00847 · 57.6th percentile
Published
2023-02-23T00:00Z
EPSS history
Timeline
  • 23 FEB 00:00Z
    Ubiquiti Networks UniFi Dream Machine Pro v7.2.95 allows attackers to bypass domain restrictions via crafted packets
    cvelistv5