by Kastro
Paper/Archive/CVE-2021-22943

CVE-2021-22943

hackerone — A vulnerability found in UniFi Protect application V1.18.1 and earlier permits a malicious actor who has already gained access to a netwo…

EPSS 0.4%CVSS 9.6
critical.is priorityof 100
36
CVSS 9.6 (NVD)9.6 / 10 × 3028.8Not in CISA KEV+300.0EPSS percentile 35.3.353 × 207.1No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

A vulnerability found in UniFi Protect application V1.18.1 and earlier permits a malicious actor who has already gained access to a network to subsequently control the Protect camera(s) assigned to said network. This vulnerability is fixed in UniFi Protect application V1.19.0 and later.

Affected

ProductAffectedFixed inSource
UniFi Protect applicationFixed on 1.19.0–CNA

Scores by source

NVD9.6CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

References

refcommunity.ui.com/releases/Security-Advisory-Bulletin-019-019/90a00abe-d6b6-43c6-92d4-0a0342f1506f