Ubiquiti Unifi Network Application vulnerabilities
2 vulnerabilities
Known vulnerabilities in Ubiquiti Unifi Network Application, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2023-41721ubiquitiunifi network application+1
EPSS score0.63%
Instances of UniFi Network Application that (i) are run on a UniFi Gateway Console, and (ii) are versions 7.5.176. and earlier, implement device adoption with improper access control logic, creating a risk of access to device configuration information by a malicious actor with preexisting access to the network.
Affected Products:
UDM
UDM-PRO
UDM-SE
UDR
UDW
Mitigation:
Update UniFi Network to Version 7.5.187 or later.CVE-2023-32000ubiquitiunifi network application+1EPSS score0.33%
A Cross-Site Scripting (XSS) vulnerability found in UniFi Network (Version 7.3.83 and earlier) allows a malicious actor with Site Administrator credentials to escalate privileges by persuading an Administrator to visit a malicious web page.