Executive Summary

This vulnerability is a Path Traversal flaw found in UniFi OS devices. It allows a malicious actor who has network access to exploit the system by navigating the file system in an unauthorized way. This can lead to accessing files on the underlying system that should normally be protected.

By exploiting this vulnerability, the attacker could manipulate these files to gain access to an underlying account on the device.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can have a severe impact because it allows an attacker to gain unauthorized access to sensitive files and accounts on UniFi OS devices.

The CVSS score of 10.0 indicates it is critical, meaning it can lead to complete compromise of confidentiality, integrity, and availability of the affected system.

• Unauthorized access to sensitive system files.
• Potential takeover of user accounts on the device.
• Full system compromise including data theft, manipulation, or denial of service.

Useful 0 Not Useful 0