CERT24Critical UniFi OS vulnerability lets attackers gain root privileges without authenticationLoading data…
CERT24Threat Observatory
Period

Critical UniFi OS vulnerability lets attackers gain root privileges without authentication

Attackers can chain three vulnerabilities in UniFi OS Server to execute code remotely with root privileges and without authentication. The vulnerabilities affect version 5.0.6 and earlier and were fixed in version 5.0.8 and later.

← Back to intelligence

Critical UniFi OS vulnerability lets attackers gain root privileges without authentication

Attackers can chain three vulnerabilities in UniFi OS Server to execute code remotely with root privileges and without authentication. The vulnerabilities affect version 5.0.6 and earlier and were fixed in version 5.0.8 and later.