PT-2025-34173 · Ubiquiti · Unifi Connect Ev Station Pro

Published 2025-08-21 · Updated 2025-08-26 · CVE-2025-27214

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: UniFi Connect EV Station Pro versions 1.5.18 and earlier

Description: A missing authentication check for critical functions in UniFi Connect EV Station Pro could allow an attacker with physical or adjacent access to perform an unauthorized factory reset.

Recommendations: Update UniFi Connect EV Station Pro to version 1.5.27 or later.

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2025-27214

Affected Products

Unifi Connect Ev Station Pro

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-27214 · Security Note
• https://t.me/CVEtracker/30544 · Telegram Post
• https://community.ui.com/releases/Security-Advisory-Bulletin-052-052/ac1251ee-5bb5-4cdf-8a71-68acd1775bb6 · Note
• https://twitter.com/cracbot/status/1960296203876217160 · Twitter Post
• https://twitter.com/CVEnew/status/1958397777232208079 · Twitter Post