WID-SEC-W-2025-1735

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Ubiquiti UniFi: Mehrere Schwachstellen

view advisory published 2025-08-06

Ein Angreifer kann mehrere Schwachstellen in Ubiquiti UniFi ausnutzen, um beliebigen Programmcode auszuführen und um Daten zu manipulieren.

01

describes (4)

Related CVEs.

IDseverity exploitable
CVE-2025-27215US——
An Improper Access Control could allow a malicious actor authenticated in the API of certain UniFi Connect Display Cast devices to make unsupported changes to the system. A…
CVE-2025-27214US—OT elevated—
A Missing Authentication for Critical Function vulnerability in the UniFi Connect EV Station Pro may allow a malicious actor with physical or adjacent access to perform an unauthor…
CVE-2025-27213US—OT elevated—
An Improper Access Control could allow a malicious actor authenticated in the API of certain UniFi Connect devices to enable Android Debug Bridge (ADB) and make unsupported changes…
CVE-2025-24285US——
Multiple Improper Input Validation vulnerabilities in UniFi Connect EV Station Lite may allow a Command Injection by a malicious actor with network access to the UniFi Connect EV S…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan