UI Camera g3 Flex Firmware vulnerabilities

2 CVEs affecting UI Camera g3 Flex Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-33820, published 2021-06-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-33820, published 2021-06-18. High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days. An issue was discovered in UniFi Protect G3 FLEX Camera Version UVC.v4.30.0.67.Attacker could send a huge amount of TCP SYN packet to make web service's resource exhausted. Then the web server is…
CVE-2021-33818, published 2021-06-18. High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days. An issue was discovered in UniFi Protect G3 FLEX Camera Version UVC.v4.30.0.67. Attackers can use slowhttptest tool to send incomplete HTTP request, which could make server keep waiting for the…