A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in certain devices running UniFi OS to execute a Command Injection within such UniFi OS devices or instances.
| Vendor | Product | Versions |
|---|---|---|
| ubiquiti | unifi os | 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0 |
Updated affected versions to include 5.1.14, marked as actively exploited, and added new tag 'command injection'.
Initial creation
