PT-2025-34172 · Ubiquiti · Unifi Connect Display+2

Published 2025-08-21 · Updated 2025-08-21 · CVE-2025-27213

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions: UniFi Connect EV Station Pro versions 1.5.18 and earlier UniFi Connect Display versions 1.9.324 and earlier UniFi Connect Display Cast versions 1.9.301 and earlier UniFi Connect Display Cast Pro versions 1.0.78 and earlier UniFi Connect Display Cast Lite versions 1.0.3 and earlier

Description: An improper access control could allow a malicious actor authenticated in the API of certain UniFi Connect devices to enable Android Debug Bridge (ADB) and make unsupported changes to the system. The API allows enabling ADB, potentially leading to unauthorized system modifications.

Recommendations: Update UniFi Connect EV Station Pro to version 1.5.27 or later. Update UniFi Connect Display to version 1.13.6 or later. Update UniFi Connect Display Cast to version 1.10.3 or later. Update UniFi Connect Display Cast Pro to version 1.0.83 or later. Update UniFi Connect Display Cast Lite to version 1.1.3 or later.

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2025-27213

Affected Products

Unifi Connect Display

Unifi Connect Display Cast

Unifi Connect Ev Station Pro

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-27213 · Security Note
• https://t.me/CVEtracker/30543 · Telegram Post
• https://community.ui.com/releases/Security-Advisory-Bulletin-052-052/ac1251ee-5bb5-4cdf-8a71-68acd1775bb6 · Note
• https://twitter.com/CVEnew/status/1958397774300430627 · Twitter Post