Improper access control in Ubiquiti Networks products - CVE-2024-29206

Vulnerability identifier: #VU93792

CSH Severity: Low

CVSS v4: 2.1 [CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-29206

CWE-ID: CWE-284

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote user to gain unauthorized access to otherwise restricted functionality.

The vulnerability exists due to improper access restrictions within the setDebugPortEnabled method. A remote administrator can enable Android Debug Bridge (ADB) and make unsupported changes to the system.

UniFi Connect EV Station
UniFi Connect EV Station Pro
UniFi Access G2 Reader Pro
UniFi Access Reader Pro
UniFi Access Intercom
UniFi Access Intercom Viewer
UniFi Connect Display
UniFi Connect Display Cast
UniFi Connect Application

Install updates from vendor's website.

UniFi Connect EV Station - update to 1.2.15
UniFi Connect EV Station Pro - update to 1.2.15
UniFi Access G2 Reader Pro - update to 1.3.37
UniFi Access Reader Pro - update to 2.8.19
UniFi Access Intercom - update to 1.1.32
UniFi Access Intercom Viewer - update to 1.1.6
UniFi Connect Display - update to 1.11.348
UniFi Connect Display Cast - update to 1.8.255
UniFi Connect Application - update to 3.10.7

• https://community.ui.com/releases/Security-Advisory-bulletin-039-039/44e24007-2c2c-4ac0-bebf-3f19b9b24f09
• https://www.zerodayinitiative.com/advisories/ZDI-24-881/

• Multiple vulnerabilities in Ubiquiti Networks products