DeutschShown in its original language — a full translation is planned for a future version.
Ubiquiti UniFi (Protect Camera und Application): Mehrere Schwachstellen
view advisory published 2025-02-18
Ein entfernter anonymer Angreifer oder ein Angreifer aus einem angrenzenden Netzwerk kann mehrere Schwachstellen in Ubiquiti UniFi ausnutzen, um beliebigen Code auszuführen, Daten zu manipulieren und Sicherheitsmaßnahmen zu umgehen.
01
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-23119US | — | — | ||
An Improper Neutralization of Escape Sequences vulnerability could allow an Authentication Bypass with a Remote Code Execution (RCE) by a malicious actor with access to UniFi Prote… | ||||
| CVE-2025-23118US | — | — | ||
An Improper Certificate Validation vulnerability could allow an authenticated malicious actor with access to UniFi Protect Cameras adjacent network to make unsupported changes to t… | ||||
| CVE-2025-23117US | —OT elevated | — | ||
An Insufficient Firmware Update Validation vulnerability could allow an authenticated malicious actor with access to UniFi Protect Cameras adjacent network to make unsupported chan… | ||||
| CVE-2025-23116US | — | — | ||
An Authentication Bypass vulnerability on UniFi Protect Application with Auto-Adopt Bridge Devices enabled could allow a malicious actor with access to UniFi Protect Cameras adjace… | ||||
| CVE-2025-23115US | — | — | ||
A Use After Free vulnerability on UniFi Protect Cameras could allow a Remote Code Execution (RCE) by a malicious actor with access to UniFi Protect Cameras management network. | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan