CVE-2020-27888

Name of the Vulnerable Software and Affected Versions Ubiquiti UniFi Meshing Access Point UAP-AC-M version 4.3.21.11325 UniFi Controller version 6.0.28

Description An issue allows cached credentials to remain on an access point after it returns wirelessly from a disconnected state, potentially providing unintended network access.

Recommendations For Ubiquiti UniFi Meshing Access Point UAP-AC-M version 4.3.21.11325, consider resetting the device to clear cached credentials after a wireless reconnection. For UniFi Controller version 6.0.28, restrict access to sensitive areas of the network until a fix is available to prevent potential exploitation of the cached credentials issue.