PT-2017-9347 · Ubiquiti Networks · Unifi

Published 2017-01-23 · Updated 2017-01-26 · CVE-2016-7792

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ubiquiti Networks UniFi version 5.2.7

Description The issue allows remote attackers to modify the database by directly connecting to it, due to a lack of access restriction to the database.

Recommendations For Ubiquiti Networks UniFi version 5.2.7, restrict access to the database to prevent unauthorized modifications.

Exploit

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2016-7792

Affected Products

Unifi

References · 4

• 🔥 https://packetstormsecurity.com/files/138928/Ubiquiti-UniFi-AP-AC-Lite-5.2.7-Improper-Access-Control.html · Exploit
• https://osv.dev/vulnerability/CVE-2016-7792 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-7792 · Security Note
• http://securityfocus.com/bid/93270 · Note