PatchTheCVEubnt vulnerabilities
Recent CVEs affecting ubnt products. 5 tracked.
ubnt has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2018-07-03. Highest priority: CVE-2017-0934 (score 48/100).
- CVE-2018-12591 HIGH 7.2 UPGRADE Ubiquiti Networks EdgeSwitch version 1.7.3 and prior suffer from an improperly neutralized element in an OS co
- CVE-2017-0934 HIGH 8.8 UPGRADE Ubiquiti Networks EdgeOS version 1.9.1 and prior suffer from an Improper Privilege Management vulnerability du
- CVE-2017-0933 HIGH 8.0 UPGRADE Ubiquiti Networks EdgeOS version 1.9.1 and prior suffer from a Cross-Site Request Forgery (CSRF) vulnerability
- CVE-2017-0932 HIGH 8.8 UPGRADE Ubiquiti Networks EdgeOS version 1.9.1.1 and prior suffer from an Improper Privilege Management vulnerability
- CVE-2017-0913 MEDIUM 4.7 UPGRADE Ubiquiti UCRM versions 2.3.0 to 2.7.7 allow an authenticated user to read arbitrary files in the local file sy
FAQ
How do I fix ubnt vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ubnt being exploited right now?
None of the tracked ubnt CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ubnt CVE should I patch first?
CVE-2017-0934 currently ranks highest (48/100): Ubiquiti Networks EdgeOS version 1.9.1 and prior suffer from an Improper Privilege Management vulnerability du.