Unverified Password Change in Ubiquiti Networks products - CVE-2024-29208

Vulnerability identifier: #VU93794

CSH Severity: Low

CVSS v4: 2.1 [CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-29208

CWE-ID: CWE-620

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote user to compromise the target system.

The vulnerability exists due to lack of proper validation of the old password before setting a new password. A remote administrator can change the system password without knowing the previous password.

UniFi Connect EV Station
UniFi Connect EV Station Pro
UniFi Connect Display
UniFi Connect Display Cast
UniFi Connect Application

Install updates from vendor's website.

UniFi Connect EV Station - update to 1.2.15
UniFi Connect EV Station Pro - update to 1.2.15
UniFi Connect Display - update to 1.11.348
UniFi Connect Display Cast - update to 1.8.255
UniFi Connect Application - update to 3.10.7

• https://community.ui.com/releases/Security-Advisory-bulletin-039-039/44e24007-2c2c-4ac0-bebf-3f19b9b24f09
• https://www.zerodayinitiative.com/advisories/ZDI-24-879/

• Multiple vulnerabilities in Ubiquiti Networks products