PT-2021-5212 · Ubiquiti · Unifi Switches

Published 2021-12-06 · Updated 2021-12-07 · CVE-2021-44527

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions UniFi Switch versions 5.43.35 and earlier

Description A vulnerability found in UniFi Switch firmware allows a malicious actor who has already gained access to the network to perform a Deny of Service (DoS) attack on the affected switch. The issue is related to an uncontrolled resource consumption.

Recommendations For versions 5.43.35 and earlier, update to UniFi Switch firmware 5.76.6 or later to resolve the issue.

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

BDU:2021-06014

CVE-2021-44527

Affected Products

Unifi Switches

References · 7

• https://community.ui.com/releases/Security-Advisory-Bulletin-022-022/cd83c01b-33e4-454a-b3b9-1c3ccebea7cb · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-44527 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-44527 · Security Note
• https://bdu.fstec.ru/vul/2021-06014 · Security Note
• https://t.me/cvenotify/24364 · Telegram Post
• https://t.me/cibsecurity/33444 · Telegram Post
• https://t.me/cvenotify/24331 · Telegram Post