PT-2021-20332 · Ubiquiti · Unifi Protect G3 Flex Camera

Guan Yu Lai + 2 · Published 2021-06-18 · Updated 2021-06-24 · CVE-2021-33818

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: UniFi Protect G3 FLEX Camera version UVC.v4.30.0.67

Description: An issue was discovered in the UniFi Protect G3 FLEX Camera, where attackers can use the slowhttptest tool to send incomplete HTTP requests. This could make the server keep waiting for the packet to finish the connection until its resources are exhausted, resulting in a denial-of-service.

Recommendations: For UniFi Protect G3 FLEX Camera version UVC.v4.30.0.67, consider restricting access to the web server to minimize the risk of exploitation until a patch is available. As a temporary workaround, limiting the number of concurrent connections to the server may help mitigate the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2021-33818

Affected Products

Unifi Protect G3 Flex Camera

References · 7

• 🔥 https://github.com/Jian-Xian/CVE-POC/blob/master/CVE-2021-33818.md · Exploit
• https://store.ui.com/collections/unifi-protect-cameras/products/unifi-video-g3-flex-camera · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-33818 · Security Note
• https://osv.dev/vulnerability/CVE-2021-33818 · Vendor Advisory
• https://github.com/shekyan/slowhttptest · Note
• https://t.me/cibsecurity/25559 · Telegram Post
• https://t.me/cvenotify/16553 · Telegram Post