CVE-2022-22570: UI Ua Lite Firmware

Critical severity, CVSS 10.0. EPSS: 1.1% chance of exploitation in the next 30 days.

A buffer overflow vulnerability found in the UniFi Door Access Reader Lite’s (UA Lite) firmware (Version 3.8.28.24 and earlier) allows a malicious actor who has gained access to a network to control all connected UA devices. This vulnerability is fixed in Version 3.8.31.13 and later.

Affected products

• UI Ua Lite Firmware: before 3.8.31.13 (fixed in 3.8.31.13)

Published 2022-04-01. Last modified 2026-06-17.