PT-2025-6976 · Ubiquiti · Unifi Protect Cameras

Published 2025-02-18 · Updated 2025-06-18 · CVE-2025-23118

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:A/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions UniFi Protect Cameras (affected versions not specified)

Description The issue is related to errors in the certificate authentication procedure of the UniFi Protect Cameras system. Exploitation of this issue may allow a remote attacker to gain full control over the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

BDU:2025-02006

CVE-2025-23118

ZDI-25-376

Affected Products

Unifi Protect Cameras

References · 10

• https://zerodayinitiative.com/advisories/ZDI-25-376 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-23118 · Security Note
• https://bdu.fstec.ru/vul/2025-02006 · Security Note
• https://community.ui.com/releases/Security-Advisory-Bulletin-046-046/9649ea8f-93db-4713-a875-c3fd7614943f · Note
• https://twitter.com/TheZDIBugs/status/1935396676874707011 · Twitter Post
• https://reddit.com/r/Ubiquiti/comments/1iso02a/psa_multiple_cves_with_unifi_protect_and_unifi · Reddit Post
• https://t.me/cvenotify/113441 · Telegram Post
• https://t.me/cvedetector/19205 · Telegram Post
• https://securityonline.info/cve-2025-23115-cve-2025-23116-hackers-can-hijack-ubiquiti-unifi-protect-cameras · Note
• https://twitter.com/CVEnew/status/1895982014630867270 · Twitter Post