ghsa-j6c9-hh92-4hrx
Vulnerability from github
Published
2025-08-21 03:30
Modified
2025-08-21 15:30
Severity ?
4.9 (Medium) - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Details

An Improper Access Control could allow a malicious actor authenticated in the API of certain UniFi Connect devices to enable Android Debug Bridge (ADB) and make unsupported changes to the system.

Affected Products:

UniFi Connect EV Station Pro (Version 1.5.18 and earlier) UniFi Connect Display (Version 1.9.324 and earlier) UniFi Connect Display Cast (Version 1.9.301 and earlier) UniFi Connect Display Cast Pro (Version 1.0.78 and earlier) UniFi Connect Display Cast Lite (Version 1.0.3 and earlier)

Mitigation:

Update UniFi Connect EV Station Pro to Version 1.5.27 or later Update UniFi Connect Display to Version 1.13.6 or later Update UniFi Connect Display Cast to Version 1.10.3 or later Update UniFi Connect Display Cast Pro to Version 1.0.83 or later Update UniFi Connect Display Cast Lite to Version 1.1.3 or later

Show details on source website

To clipboard 

{
  "affected": [],
  "aliases": [
    "CVE-2025-27213"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-863"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-08-21T01:15:35Z",
    "severity": "MODERATE"
  },
  "details": "An Improper Access Control could allow a malicious actor authenticated in the API of certain UniFi Connect devices to enable Android Debug Bridge (ADB) and make unsupported changes to the system.\n\n \n\nAffected Products:\n\nUniFi Connect EV Station Pro (Version 1.5.18 and earlier)\nUniFi Connect Display (Version 1.9.324 and earlier)\nUniFi Connect Display Cast (Version 1.9.301 and earlier)\nUniFi Connect Display Cast Pro (Version 1.0.78 and earlier)\nUniFi Connect Display Cast Lite (Version 1.0.3 and earlier)\n\nMitigation:\n\nUpdate UniFi Connect EV Station Pro to Version 1.5.27 or later\nUpdate UniFi Connect Display to Version 1.13.6 or later\nUpdate UniFi Connect Display Cast to Version 1.10.3 or later\nUpdate UniFi Connect Display Cast Pro to Version 1.0.83 or later\nUpdate UniFi Connect Display Cast Lite to Version 1.1.3 or later",
  "id": "GHSA-j6c9-hh92-4hrx",
  "modified": "2025-08-21T15:30:34Z",
  "published": "2025-08-21T03:30:25Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-27213"
    },
    {
      "type": "WEB",
      "url": "https://community.ui.com/releases/Security-Advisory-Bulletin-052-052/ac1251ee-5bb5-4cdf-8a71-68acd1775bb6"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
      "type": "CVSS_V3"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.