Vulnerabilities (CVE)

Filtered by vendor Ui Subscribe
Filtered by product Unifi Os
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-31997 1 Ui 3 Cloud Key Gen2, Cloud Key Gen2 Plus, Unifi Os 2024-02-04 N/A 9.0 CRITICAL
UniFi OS 3.1 introduces a misconfiguration on consoles running UniFi Network that allows users on a local network to access MongoDB. Applicable Cloud Keys that are both (1) running UniFi OS 3.1 and (2) hosting the UniFi Network application. "Applicable Cloud Keys" include the following: Cloud Key Gen2 and Cloud Key Gen2 Plus.