Advisories · Technology
Ubiquiti Inc Dream Machines.
Every CVE that names Ubiquiti Inc Dream Machines among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
Out-of-bounds write in Ubiquiti Inc Dream Machines and others
- Ubiquiti Inc Dream Machines
- Ubiquiti Inc Enterprise Firewalls
- Memory corruption
- CVSS 7.5 High
Uncontrolled recursion in Ubiquiti Inc Dream Machines and others
- Ubiquiti Inc Dream Machines
- Ubiquiti Inc Enterprise Firewalls
- Denial of service
- CVSS 7.5 High
Out-of-bounds read in Ubiquiti Inc Dream Machines and others
- Ubiquiti Inc Dream Machines
- Ubiquiti Inc Enterprise Firewalls
- Memory corruption
- CVSS 7.5 High
Out-of-bounds read in Ubiquiti Inc Dream Machines and others
- Ubiquiti Inc Dream Machines
- Ubiquiti Inc Enterprise Firewalls
- Memory corruption
- CVSS 7.5 High
Out-of-bounds write in Ubiquiti Inc Dream Machines and others
- Ubiquiti Inc Dream Machines
- Ubiquiti Inc Enterprise Firewalls
- Memory corruption
- CVSS 7.5 High
Out-of-bounds write in Ubiquiti Inc Dream Machines and others
- Ubiquiti Inc Dream Machines
- Ubiquiti Inc Enterprise Firewalls
- Memory corruption
- CVSS 10.0 CriticalCritical · CVSS 9+
CRLF injection in Ubiquiti Inc UniFi OS Server and others
- Ubiquiti Inc UniFi OS Server
- Ubiquiti Inc Cloud Keys
- Other injection
- CVSS 9.0 CriticalCritical · CVSS 9+
CRLF injection in Ubiquiti Inc UniFi OS Server and others
- Ubiquiti Inc UniFi OS Server
- Ubiquiti Inc Cloud Keys
- Other injection
- CVSS 9.0 CriticalCritical · CVSS 9+
Active debug code in Ubiquiti Inc UniFi OS Server and others
- Ubiquiti Inc UniFi OS Server
- Ubiquiti Inc Cloud Keys
- CWE-489
- CVSS 9.9 CriticalCritical · CVSS 9+
Improper access control in Ubiquiti Inc UniFi OS Server and others
- Ubiquiti Inc UniFi OS Server
- Ubiquiti Inc Cloud Keys
- Broken access control
- CVSS 9.9 CriticalCritical · CVSS 9+
Improper access control in Ubiquiti Inc UniFi OS Server and others
- Ubiquiti Inc UniFi OS Server
- Ubiquiti Inc Cloud Keys
- Broken access control
- CVSS 9.0 CriticalCritical · CVSS 9+
Improper access control in Ubiquiti Inc Dream Machines and others
- Ubiquiti Inc Dream Machines
- Ubiquiti Inc Enterprise Fortress Gateway
- Broken access control
- CVSS 7.5 High
Improper access control in Ubiquiti Inc Dream Machines and others
- Ubiquiti Inc Dream Machines
- Ubiquiti Inc Dream Wall
- Broken access control
- CVSS 7.7 High
Server-side request forgery in Ubiquiti Inc UniFi OS Server and others
- Ubiquiti Inc UniFi OS Server
- Ubiquiti Inc Dream Machines
- Server-side request forgery (SSRF)
- CVSS 9.9 CriticalCritical · CVSS 9+
Improper input validation in Ubiquiti Inc UniFi OS Server and others
- Ubiquiti Inc UniFi OS Server
- Ubiquiti Inc Dream Machines
- CWE-20
- CVSS 7.5 High
A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Origin Resource Sharing (CORS) misconfiguration found in UniFi OS to trigger actions in UniFi OS using that…
- Ubiquiti Inc UniFi OS Server
- Ubiquiti Inc Dream Machines
- CWE-942
- CVSS 8.8 High
SQL injection in Ubiquiti Inc UniFi OS Server and others
- Ubiquiti Inc UniFi OS Server
- Ubiquiti Inc Dream Machines
- SQL injection
- CVSS 8.6 High
Path traversal in Ubiquiti Inc UniFi OS Server and others
- Ubiquiti Inc UniFi OS Server
- Ubiquiti Inc Dream Machines
- Path traversal