CVE-2025-27213 (GCVE-0-2025-27213)
Vulnerability from cvelistv5
Published
2025-08-21 00:01
Modified
2025-08-21 14:07
Severity ?
4.9 (Medium) - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Summary
An Improper Access Control could allow a malicious actor authenticated in the API of certain UniFi Connect devices to enable Android Debug Bridge (ADB) and make unsupported changes to the system. Affected Products: UniFi Connect EV Station Pro (Version 1.5.18 and earlier) UniFi Connect Display (Version 1.9.324 and earlier) UniFi Connect Display Cast (Version 1.9.301 and earlier) UniFi Connect Display Cast Pro (Version 1.0.78 and earlier) UniFi Connect Display Cast Lite (Version 1.0.3 and earlier) Mitigation: Update UniFi Connect EV Station Pro to Version 1.5.27 or later Update UniFi Connect Display to Version 1.13.6 or later Update UniFi Connect Display Cast to Version 1.10.3 or later Update UniFi Connect Display Cast Pro to Version 1.0.83 or later Update UniFi Connect Display Cast Lite to Version 1.1.3 or later
References
Impacted products
Vendor Product Version
Ubiquiti Inc UniFi Connect EV Station Pro Version: 1.5.27   ≤
Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 4.9,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "HIGH",
              "privilegesRequired": "HIGH",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-27213",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-08-21T14:07:33.904511Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-863",
                "description": "CWE-863 Incorrect Authorization",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-08-21T14:07:45.141Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "UniFi Connect EV Station Pro",
          "vendor": "Ubiquiti Inc",
          "versions": [
            {
              "lessThan": "1.5.27",
              "status": "affected",
              "version": "1.5.27",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "UniFi Connect Display",
          "vendor": "Ubiquiti Inc",
          "versions": [
            {
              "lessThan": "1.13.6",
              "status": "affected",
              "version": "1.13.6",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "UniFi Connect Display Cast",
          "vendor": "Ubiquiti Inc",
          "versions": [
            {
              "lessThan": "1.10.3",
              "status": "affected",
              "version": "1.10.3",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "UniFi Connect Display Cast Pro",
          "vendor": "Ubiquiti Inc",
          "versions": [
            {
              "lessThan": "1.0.83",
              "status": "affected",
              "version": "1.0.83",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "UniFi Connect Display Cast Lite",
          "vendor": "Ubiquiti Inc",
          "versions": [
            {
              "lessThan": "1.1.3",
              "status": "affected",
              "version": "1.1.3",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An Improper Access Control could allow a malicious actor authenticated in the API of certain UniFi Connect devices to enable Android Debug Bridge (ADB) and make unsupported changes to the system.\r\n\r\n \r\n\r\nAffected Products:\r\n\r\nUniFi Connect EV Station Pro (Version 1.5.18 and earlier)\r\nUniFi Connect Display (Version 1.9.324 and earlier)\r\nUniFi Connect Display Cast (Version 1.9.301 and earlier)\r\nUniFi Connect Display Cast Pro (Version 1.0.78 and earlier)\r\nUniFi Connect Display Cast Lite (Version 1.0.3 and earlier)\r\n\r\nMitigation:\r\n\r\nUpdate UniFi Connect EV Station Pro to Version 1.5.27 or later\r\nUpdate UniFi Connect Display to Version 1.13.6 or later\r\nUpdate UniFi Connect Display Cast to Version 1.10.3 or later\r\nUpdate UniFi Connect Display Cast Pro to Version 1.0.83 or later\r\nUpdate UniFi Connect Display Cast Lite to Version 1.1.3 or later"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-08-21T00:01:24.222Z",
        "orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
        "shortName": "hackerone"
      },
      "references": [
        {
          "url": "https://community.ui.com/releases/Security-Advisory-Bulletin-052-052/ac1251ee-5bb5-4cdf-8a71-68acd1775bb6"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
    "assignerShortName": "hackerone",
    "cveId": "CVE-2025-27213",
    "datePublished": "2025-08-21T00:01:24.222Z",
    "dateReserved": "2025-02-20T01:00:01.799Z",
    "dateUpdated": "2025-08-21T14:07:45.141Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2025-27213\",\"sourceIdentifier\":\"support@hackerone.com\",\"published\":\"2025-08-21T01:15:35.520\",\"lastModified\":\"2025-08-22T18:09:17.710\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"An Improper Access Control could allow a malicious actor authenticated in the API of certain UniFi Connect devices to enable Android Debug Bridge (ADB) and make unsupported changes to the system.\\r\\n\\r\\n \\r\\n\\r\\nAffected Products:\\r\\n\\r\\nUniFi Connect EV Station Pro (Version 1.5.18 and earlier)\\r\\nUniFi Connect Display (Version 1.9.324 and earlier)\\r\\nUniFi Connect Display Cast (Version 1.9.301 and earlier)\\r\\nUniFi Connect Display Cast Pro (Version 1.0.78 and earlier)\\r\\nUniFi Connect Display Cast Lite (Version 1.0.3 and earlier)\\r\\n\\r\\nMitigation:\\r\\n\\r\\nUpdate UniFi Connect EV Station Pro to Version 1.5.27 or later\\r\\nUpdate UniFi Connect Display to Version 1.13.6 or later\\r\\nUpdate UniFi Connect Display Cast to Version 1.10.3 or later\\r\\nUpdate UniFi Connect Display Cast Pro to Version 1.0.83 or later\\r\\nUpdate UniFi Connect Display Cast Lite to Version 1.1.3 or later\"},{\"lang\":\"es\",\"value\":\"Un control de acceso inadecuado podr\u00eda permitir que un agente malicioso autenticado en la API de ciertos dispositivos UniFi Connect habilite Android Debug Bridge (ADB) y realice cambios no admitidos en el sistema. Productos afectados: UniFi Connect EV Station Pro (versi\u00f3n 1.5.18 y anteriores), UniFi Connect Display (versi\u00f3n 1.9.324 y anteriores), UniFi Connect Display Cast (versi\u00f3n 1.9.301 y anteriores), UniFi Connect Display Cast Pro (versi\u00f3n 1.0.78 y anteriores), UniFi Connect Display Cast Lite (versi\u00f3n 1.0.3 y anteriores). Mitigaci\u00f3n: Actualizar UniFi Connect EV Station Pro a la versi\u00f3n 1.5.27 o posterior. Actualizar UniFi Connect Display a la versi\u00f3n 1.13.6 o posterior. Actualizar UniFi Connect Display Cast a la versi\u00f3n 1.10.3 o posterior. Actualizar UniFi Connect Display Cast Pro a la versi\u00f3n 1.0.83 o posterior. Actualizar UniFi Connect Display Cast Lite a la versi\u00f3n 1.1.3 o posterior.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N\",\"baseScore\":4.9,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"HIGH\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":1.2,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-863\"}]}],\"references\":[{\"url\":\"https://community.ui.com/releases/Security-Advisory-Bulletin-052-052/ac1251ee-5bb5-4cdf-8a71-68acd1775bb6\",\"source\":\"support@hackerone.com\"}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 4.9, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"NONE\", \"privilegesRequired\": \"HIGH\", \"confidentialityImpact\": \"NONE\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2025-27213\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-08-21T14:07:33.904511Z\"}}}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-863\", \"description\": \"CWE-863 Incorrect Authorization\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-08-21T14:07:23.152Z\"}}], \"cna\": {\"affected\": [{\"vendor\": \"Ubiquiti Inc\", \"product\": \"UniFi Connect EV Station Pro\", \"versions\": [{\"status\": \"affected\", \"version\": \"1.5.27\", \"lessThan\": \"1.5.27\", \"versionType\": \"semver\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"Ubiquiti Inc\", \"product\": \"UniFi Connect Display\", \"versions\": [{\"status\": \"affected\", \"version\": \"1.13.6\", \"lessThan\": \"1.13.6\", \"versionType\": \"semver\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"Ubiquiti Inc\", \"product\": \"UniFi Connect Display Cast\", \"versions\": [{\"status\": \"affected\", \"version\": \"1.10.3\", \"lessThan\": \"1.10.3\", \"versionType\": \"semver\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"Ubiquiti Inc\", \"product\": \"UniFi Connect Display Cast Pro\", \"versions\": [{\"status\": \"affected\", \"version\": \"1.0.83\", \"lessThan\": \"1.0.83\", \"versionType\": \"semver\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"Ubiquiti Inc\", \"product\": \"UniFi Connect Display Cast Lite\", \"versions\": [{\"status\": \"affected\", \"version\": \"1.1.3\", \"lessThan\": \"1.1.3\", \"versionType\": \"semver\"}], \"defaultStatus\": \"unaffected\"}], \"references\": [{\"url\": \"https://community.ui.com/releases/Security-Advisory-Bulletin-052-052/ac1251ee-5bb5-4cdf-8a71-68acd1775bb6\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"An Improper Access Control could allow a malicious actor authenticated in the API of certain UniFi Connect devices to enable Android Debug Bridge (ADB) and make unsupported changes to the system.\\r\\n\\r\\n \\r\\n\\r\\nAffected Products:\\r\\n\\r\\nUniFi Connect EV Station Pro (Version 1.5.18 and earlier)\\r\\nUniFi Connect Display (Version 1.9.324 and earlier)\\r\\nUniFi Connect Display Cast (Version 1.9.301 and earlier)\\r\\nUniFi Connect Display Cast Pro (Version 1.0.78 and earlier)\\r\\nUniFi Connect Display Cast Lite (Version 1.0.3 and earlier)\\r\\n\\r\\nMitigation:\\r\\n\\r\\nUpdate UniFi Connect EV Station Pro to Version 1.5.27 or later\\r\\nUpdate UniFi Connect Display to Version 1.13.6 or later\\r\\nUpdate UniFi Connect Display Cast to Version 1.10.3 or later\\r\\nUpdate UniFi Connect Display Cast Pro to Version 1.0.83 or later\\r\\nUpdate UniFi Connect Display Cast Lite to Version 1.1.3 or later\"}], \"providerMetadata\": {\"orgId\": \"36234546-b8fa-4601-9d6f-f4e334aa8ea1\", \"shortName\": \"hackerone\", \"dateUpdated\": \"2025-08-21T00:01:24.222Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2025-27213\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-08-21T14:07:45.141Z\", \"dateReserved\": \"2025-02-20T01:00:01.799Z\", \"assignerOrgId\": \"36234546-b8fa-4601-9d6f-f4e334aa8ea1\", \"datePublished\": \"2025-08-21T00:01:24.222Z\", \"assignerShortName\": \"hackerone\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.