UI UniFi Protect Firmware vulnerabilities

2 CVEs affecting UI UniFi Protect Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-8267, published 2020-11-05.

More from UI.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-8188, published 2020-07-02. High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days. We have recently released new version of UniFi Protect firmware v1.13.3 and v1.14.10 for Unifi Cloud Key Gen2 Plus and UniFi Dream Machine Pro/UNVR respectively that fixes vulnerabilities found on…
• CVE-2020-8267, published 2020-11-05. Medium severity, CVSS 5.3. EPSS: 1.3% chance of exploitation in the next 30 days. A security issue was found in UniFi Protect controller v1.14.10 and earlier.The authentication in the UniFi Protect controller API was using “x-token” improperly, allowing attackers to use the API to…