Ubiquiti UniFi: Multiple Vulnerabilities
A BSI Warn- und Informationsdienst (WID): Schwachstellen-Informationen (Bürger Cert) ·
Admiralty grading (A–F · 1–6)
Source reliability
- A Completely reliable
- B Usually reliable
- C Fairly reliable
- D Not usually reliable
- E Unreliable
- F Cannot be judged
Information credibility
- 1 Confirmed
- 2 Probably true
- 3 Possibly true
- 4 Doubtful
- 5 Improbable
- 6 Cannot be judged
NATO Admiralty (AJP-2.1) grades confidence, independent of the risk score. Cross-source corroboration isn't tracked for non-CVE news, so single-source items are capped at a lower credibility number; a low number does not imply low quality.
Key insight
The BSI notice lists neither CVE IDs nor CVSS scores, so prioritisation is only possible via the Ubiquiti vendor advisory.
Description
The BSI warning and information service reports multiple vulnerabilities in Ubiquiti UniFi products without naming individual CVE IDs or severity scores. According to the advisory, the vulnerabilities can be exploited to access internal systems and information, modify files, execute malicious code, or crash devices. Affected are components of the UniFi network infrastructure such as controllers and access points. The report contains no information on active exploitation, proof-of-concept exploits, or inclusion in Known Exploited Vulnerabilities lists. Detailed information on affected versions and fixes must be obtained from the vendor advisory.
Risk score
- cvss base
- 0.00
- kev bonus
- 0.00
- epss bonus
- 0.00
- poc bonus
- 0.00
- raw before weight
- 0.00
- industry weight
- 1.21
- freshness factor
- 0.50
- exploitability factor
- 1.00
- days old
- 27.00
- vendor mismatch penalty
- 0.00
Path: operational