Unifi vulnerabilities
2 vulnerabilities
Known vulnerabilities in Unifi products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 2 products.
Products
2- Protect For Unifi Cloud Key Gen2 Plus1 vulnerabilities
- Unifi1 vulnerabilities
CVE-2020-8213uiunifi_protect+1
EPSS score1.11%
An information exposure vulnerability exists in UniFi Protect before v1.13.4-beta.5 that allowed unauthenticated attackers access to valid usernames for the UniFi Protect web application via HTTP response code and response timing.CVE-2019-5456uiunifi_controller+1EPSS score1.29%
SMTP MITM refers to a malicious actor setting up an SMTP proxy server between the UniFi Controller version <= 5.10.21 and their actual SMTP server to record their SMTP credentials for malicious use later.