PT-2021-15289 · Ubiquiti · Unifi Protect

Published 2021-08-31 · Updated 2021-09-09 · CVE-2021-22943

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Critical

Base vector

AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions UniFi Protect versions prior to 1.19.0

Description A vulnerability found in the UniFi Protect application permits a malicious actor who has already gained access to a network to subsequently control the Protect camera(s) assigned to said network.

Recommendations For versions prior to 1.19.0, update to UniFi Protect application version 1.19.0 or later to resolve the issue.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2021-22943

Affected Products

Unifi Protect

References · 5

• https://osv.dev/vulnerability/CVE-2021-22943 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-22943 · Security Note
• https://community.ui.com/releases/Security-Advisory-Bulletin-019-019/90a00abe-d6b6-43c6-92d4-0a0342f1506f · Vendor Advisory
• https://t.me/cvenotify/20708 · Telegram Post
• https://t.me/cibsecurity/28103 · Telegram Post