by Kastro
Paper/Archive/CVE-2022-22570

CVE-2022-22570

hackerone — A buffer overflow vulnerability found in the UniFi Door Access Reader Lite’s (UA Lite) firmware (Version 3.8.28.24 and earlier) allows a…

EPSS 1%CVSS 10.0
critical.is priorityof 100
43
CVSS 10.0 (NVD)10.0 / 10 × 3030.0Not in CISA KEV+300.0EPSS percentile 64.8.648 × 2013.0No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

A buffer overflow vulnerability found in the UniFi Door Access Reader Lite’s (UA Lite) firmware (Version 3.8.28.24 and earlier) allows a malicious actor who has gained access to a network to control all connected UA devices. This vulnerability is fixed in Version 3.8.31.13 and later.

Affected

ProductAffectedFixed inSource
UniFi Door Access Reader LiteFixed in Version 3.8.31.13 or later.–CNA

Scores by source

NVD10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

References

refcommunity.ui.com/releases/Security-Advisory-Bulletin-024-024/22725557-0f72-4f5d-83b0-f16252fcd4b7