PT-2020-16827

CVE-2020-27888

·

تاريخ النشر

2020-10-27

·

تاريخ التحديث

2021-07-21

الوصف من

CVSS 3.1
7.5
عالية
المقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Ubiquiti UniFi Meshing Access Point UAP-AC-M version 4.3.21.11325 UniFi Controller version 6.0.28
Description An issue allows cached credentials to remain on an access point after it returns wirelessly from a disconnected state, potentially providing unintended network access.
Recommendations For Ubiquiti UniFi Meshing Access Point UAP-AC-M version 4.3.21.11325, consider resetting the device to clear cached credentials after a wireless reconnection. For UniFi Controller version 6.0.28, restrict access to sensitive areas of the network until a fix is available to prevent potential exploitation of the cached credentials issue.
قابلية الاستغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾