Description

Due to vulnerabilities in Log4j library used by Ubiquiti Unifi, an unauthenticated attacker can leak sensitive information or execute arbitrary code on the system.

Remediation

Upgrade to the latest version of Ubiquiti Unifi

References

UniFi Network Application 6.5.55

Related Vulnerabilities

Apache Shiro Deserialization RCE

WordPress 6.1.x Shortcode Execution (6.1 - 6.1.2)

WordPress Plugin Simple Backup Arbitrary File Download (2.7.10)

[Possible] Database Connection String Detected

Deserialization of Untrusted Data (Java Object Deserialization)

Severity

High

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A

Tags

Acumonitor Code Execution Information Disclosure CWE-78 CVE-2021-44228