PT-2023-7626

CVE-2023-24104

·

Published

2023-02-23

·

Updated

2025-03-18

Description by

CVSS 2.0
10
Critical
MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Ubiquiti Networks UniFi Dream Machine Pro version 7.2.95
Description The issue is related to insufficient access control in the software of the Ubiquiti Networks UniFi Dream Machine Pro, allowing remote attackers to bypass domain restrictions by sending crafted packets.
Recommendations For Ubiquiti Networks UniFi Dream Machine Pro version 7.2.95, consider restricting access to the device until a patch is available to prevent exploitation of the domain restriction bypass issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾