CVE-2020-8188
HIGH8.8CVSS v3
6.5CVSS v2
0.94%
EPSS (exploit probability)
CWE-77CWE
Description
We have recently released new version of UniFi Protect firmware v1.13.3 and v1.14.10 for Unifi Cloud Key Gen2 Plus and UniFi Dream Machine Pro/UNVR respectively that fixes vulnerabilities found on Protect firmware v1.13.2, v1.14.9 and prior according to the description below:View only users can run certain custom commands which allows them to assign themselves unauthorized roles and escalate their privileges.
CVSS v3 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected routers (2)
| Vendor | Model | Matched via | Affected versions | Fixed in | Patch? |
|---|---|---|---|---|---|
| Ubiquiti | Ubiquiti UniFi Dream Machine | — |
— | — | No |
| Ubiquiti | Ubiquiti UniFi Dream Machine Pro | — |
— | — | No |