CVE-2023-41721

Instances of UniFi Network Application that (i) are run on a UniFi Gateway Console, and (ii) are versions 7.5.176

Critical · published October 25, 2023

CVSS v3.0
10.0
EPSS
1%
Percentile
49.5
In the wild
Unconfirmed
What it is

Instances of UniFi Network Application that (i) are run on a UniFi Gateway Console, and (ii) are versions 7.5.176. and earlier, implement device adoption with improper access control logic, creating a risk of access to device configuration information by a malicious actor with preexisting access to the network.

Affected Products:

UDM

UDM-PRO

UDM-SE

UDR

UDW

Mitigation:

Update UniFi Network to Version 7.5.187 or later.

The record
Technical detail
CVSS v3.0
10.0 · CRITICAL
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00629 · 49.5th percentile
Published
2023-10-25T00:24Z
EPSS history
Timeline
  • 25 OCT 00:24Z
    Instances of UniFi Network Application that (i) are run on a UniFi Gateway Console, and (ii) are versions 7.5.176
    cvelistv5