Improper access control in Ubiquiti Networks products - CVE-2024-29206

Vulnerability identifier: #VU93792

CSH Severity: Low

CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: CVE-2024-29206

CWE-ID: CWE-284

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vendor: Ubiquiti Networks

Affected software:
UniFi Connect EV Station
UniFi Connect EV Station Pro
UniFi Access G2 Reader Pro
UniFi Access Reader Pro
UniFi Access Intercom
UniFi Access Intercom Viewer
UniFi Connect Display
UniFi Connect Display Cast
UniFi Connect Application

The vulnerability allows a remote user to gain unauthorized access to otherwise restricted functionality.

The vulnerability exists due to improper access restrictions within the setDebugPortEnabled method. A remote administrator can enable Android Debug Bridge (ADB) and make unsupported changes to the system.

Install updates from vendor's website.

• https://community.ui.com/releases/Security-Advisory-bulletin-039-039/44e24007-2c2c-4ac0-bebf-3f19b9b24f09
• https://www.zerodayinitiative.com/advisories/ZDI-24-881/