CVE-2020-8157: UI UniFi Cloud Key GEN2 Firmware

Medium severity, CVSS 6.8. EPSS: 0.4% chance of exploitation in the next 30 days.

UniFi Cloud Key firmware <= v1.1.10 for Cloud Key gen2 and Cloud Key gen2 Plus contains a vulnerability that allows unrestricted root access through the serial interface (UART).

Affected products

• UI UniFi Cloud Key GEN2 Firmware: up to and including 1.1.10
• UI UniFi Cloud Key GEN2 Plus Firmware: up to and including 1.1.10

Published 2020-05-02. Last modified 2026-06-17.