CVE-2025-23091 (GCVE-0-2025-23091)
Vulnerability from cvelistv5
Published
2025-02-01 06:53
Modified
2025-03-13 12:54
Severity ?
5.9 (Medium) - CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Summary
An Improper Certificate Validation on UniFi OS devices, with Identity Enterprise configured, could allow a malicious actor to execute a man-in-the-middle (MitM) attack during application update.
References
support@hackerone.comhttps://community.ui.com/releases/Security-Advisory-Bulletin-045-045/6011bc61-f2eb-457f-b71d-755703817aaf
Impacted products
Vendor Product Version
Ubiquiti Inc UDM Version: 4.1.13   ≤
Create a notification for this product.
   Ubiquiti Inc UDM-Pro Version: 4.1.13   ≤
Create a notification for this product.
   Ubiquiti Inc UDM-SE Version: 4.1.13   ≤
Create a notification for this product.
   Ubiquiti Inc UDM-Pro-Max Version: 4.1.13   ≤
Create a notification for this product.
   Ubiquiti Inc UDW Version: 4.1.13   ≤
Create a notification for this product.
   Ubiquiti Inc UNVR Version: 4.1.11   ≤
Create a notification for this product.
   Ubiquiti Inc UNVR PRO Version: 4.1.11   ≤
Create a notification for this product.
   Ubiquiti Inc UCKP Version: 4.1.11   ≤
Create a notification for this product.
   Ubiquiti Inc UCK Version: 4.1.11   ≤
Create a notification for this product.
   Ubiquiti Inc UCK-Enterprise Version: 4.1.11   ≤
Create a notification for this product.
   Ubiquiti Inc UCG-Max Version: 4.1.13   ≤
Create a notification for this product.
   Ubiquiti Inc EFG Version: 4.1.13   ≤
Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-23091",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-02-03T15:47:37.586798Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-295",
                "description": "CWE-295 Improper Certificate Validation",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-13T12:54:46.381Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "UDM",
          "vendor": "Ubiquiti Inc",
          "versions": [
            {
              "lessThan": "4.1.13",
              "status": "affected",
              "version": "4.1.13",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "UDM-Pro",
          "vendor": "Ubiquiti Inc",
          "versions": [
            {
              "lessThan": "4.1.13",
              "status": "affected",
              "version": "4.1.13",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "UDM-SE",
          "vendor": "Ubiquiti Inc",
          "versions": [
            {
              "lessThan": "4.1.13",
              "status": "affected",
              "version": "4.1.13",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "UDM-Pro-Max",
          "vendor": "Ubiquiti Inc",
          "versions": [
            {
              "lessThan": "4.1.13",
              "status": "affected",
              "version": "4.1.13",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "UDW",
          "vendor": "Ubiquiti Inc",
          "versions": [
            {
              "lessThan": "4.1.13",
              "status": "affected",
              "version": "4.1.13",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "UNVR",
          "vendor": "Ubiquiti Inc",
          "versions": [
            {
              "lessThan": "4.1.11",
              "status": "affected",
              "version": "4.1.11",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "UNVR PRO",
          "vendor": "Ubiquiti Inc",
          "versions": [
            {
              "lessThan": "4.1.11",
              "status": "affected",
              "version": "4.1.11",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "UCKP",
          "vendor": "Ubiquiti Inc",
          "versions": [
            {
              "lessThan": "4.1.11",
              "status": "affected",
              "version": "4.1.11",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "UCK",
          "vendor": "Ubiquiti Inc",
          "versions": [
            {
              "lessThan": "4.1.11",
              "status": "affected",
              "version": "4.1.11",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "UCK-Enterprise",
          "vendor": "Ubiquiti Inc",
          "versions": [
            {
              "lessThan": "4.1.11",
              "status": "affected",
              "version": "4.1.11",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "UCG-Max",
          "vendor": "Ubiquiti Inc",
          "versions": [
            {
              "lessThan": "4.1.13",
              "status": "affected",
              "version": "4.1.13",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EFG",
          "vendor": "Ubiquiti Inc",
          "versions": [
            {
              "lessThan": "4.1.13",
              "status": "affected",
              "version": "4.1.13",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An Improper Certificate Validation on UniFi OS devices, with Identity Enterprise configured, could allow a malicious actor to execute a man-in-the-middle (MitM) attack during application update."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.0"
          }
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-02-01T06:53:09.114Z",
        "orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
        "shortName": "hackerone"
      },
      "references": [
        {
          "url": "https://community.ui.com/releases/Security-Advisory-Bulletin-045-045/6011bc61-f2eb-457f-b71d-755703817aaf"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
    "assignerShortName": "hackerone",
    "cveId": "CVE-2025-23091",
    "datePublished": "2025-02-01T06:53:09.114Z",
    "dateReserved": "2025-01-10T19:05:52.772Z",
    "dateUpdated": "2025-03-13T12:54:46.381Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2025-23091\",\"sourceIdentifier\":\"support@hackerone.com\",\"published\":\"2025-02-01T07:15:08.277\",\"lastModified\":\"2025-03-13T13:15:57.990\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"An Improper Certificate Validation on UniFi OS devices, with Identity Enterprise configured, could allow a malicious actor to execute a man-in-the-middle (MitM) attack during application update.\"},{\"lang\":\"es\",\"value\":\"Una validaci\u00f3n de certificado incorrecta en dispositivos UniFi OS, con Identity Enterprise configurado, podr\u00eda permitir que un actor malintencionado ejecute un ataque de intermediario (MitM) durante la actualizaci\u00f3n de la aplicaci\u00f3n.\"}],\"metrics\":{\"cvssMetricV30\":[{\"source\":\"support@hackerone.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N\",\"baseScore\":5.9,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.2,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-295\"}]}],\"references\":[{\"url\":\"https://community.ui.com/releases/Security-Advisory-Bulletin-045-045/6011bc61-f2eb-457f-b71d-755703817aaf\",\"source\":\"support@hackerone.com\"}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2025-23091\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-02-03T15:47:37.586798Z\"}}}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-295\", \"description\": \"CWE-295 Improper Certificate Validation\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-02-12T20:41:13.170Z\"}}], \"cna\": {\"metrics\": [{\"cvssV3_0\": {\"version\": \"3.0\", \"baseScore\": 5.9, \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N\"}}], \"affected\": [{\"vendor\": \"Ubiquiti Inc\", \"product\": \"UDM\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.1.13\", \"lessThan\": \"4.1.13\", \"versionType\": \"semver\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"Ubiquiti Inc\", \"product\": \"UDM-Pro\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.1.13\", \"lessThan\": \"4.1.13\", \"versionType\": \"semver\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"Ubiquiti Inc\", \"product\": \"UDM-SE\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.1.13\", \"lessThan\": \"4.1.13\", \"versionType\": \"semver\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"Ubiquiti Inc\", \"product\": \"UDM-Pro-Max\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.1.13\", \"lessThan\": \"4.1.13\", \"versionType\": \"semver\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"Ubiquiti Inc\", \"product\": \"UDW\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.1.13\", \"lessThan\": \"4.1.13\", \"versionType\": \"semver\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"Ubiquiti Inc\", \"product\": \"UNVR\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.1.11\", \"lessThan\": \"4.1.11\", \"versionType\": \"semver\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"Ubiquiti Inc\", \"product\": \"UNVR PRO\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.1.11\", \"lessThan\": \"4.1.11\", \"versionType\": \"semver\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"Ubiquiti Inc\", \"product\": \"UCKP\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.1.11\", \"lessThan\": \"4.1.11\", \"versionType\": \"semver\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"Ubiquiti Inc\", \"product\": \"UCK\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.1.11\", \"lessThan\": \"4.1.11\", \"versionType\": \"semver\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"Ubiquiti Inc\", \"product\": \"UCK-Enterprise\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.1.11\", \"lessThan\": \"4.1.11\", \"versionType\": \"semver\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"Ubiquiti Inc\", \"product\": \"UCG-Max\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.1.13\", \"lessThan\": \"4.1.13\", \"versionType\": \"semver\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"Ubiquiti Inc\", \"product\": \"EFG\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.1.13\", \"lessThan\": \"4.1.13\", \"versionType\": \"semver\"}], \"defaultStatus\": \"unaffected\"}], \"references\": [{\"url\": \"https://community.ui.com/releases/Security-Advisory-Bulletin-045-045/6011bc61-f2eb-457f-b71d-755703817aaf\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"An Improper Certificate Validation on UniFi OS devices, with Identity Enterprise configured, could allow a malicious actor to execute a man-in-the-middle (MitM) attack during application update.\"}], \"providerMetadata\": {\"orgId\": \"36234546-b8fa-4601-9d6f-f4e334aa8ea1\", \"shortName\": \"hackerone\", \"dateUpdated\": \"2025-02-01T06:53:09.114Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2025-23091\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-03-13T12:54:46.381Z\", \"dateReserved\": \"2025-01-10T19:05:52.772Z\", \"assignerOrgId\": \"36234546-b8fa-4601-9d6f-f4e334aa8ea1\", \"datePublished\": \"2025-02-01T06:53:09.114Z\", \"assignerShortName\": \"hackerone\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.