Path Traversal in UniFi OS Devices

Executive Summary

This vulnerability is a Path Traversal flaw found in UniFi OS devices. It allows a malicious actor who has network access and low privileges to exploit the system by accessing files on the underlying operating system that they should not normally be able to reach.

By exploiting this vulnerability, the attacker can potentially manipulate these files to obtain sensitive information.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability allows a malicious actor with network access and low privileges to exploit a Path Traversal flaw in UniFi OS devices, potentially accessing sensitive information stored on the system.

Access to sensitive information through this vulnerability could lead to non-compliance with data protection regulations such as GDPR and HIPAA, which require safeguarding personal and sensitive data against unauthorized access.

Therefore, exploitation of this vulnerability may result in violations of these standards due to the exposure of protected information.

Useful 0 Not Useful 0

Impact Analysis

The impact of this vulnerability is that an attacker with network access and low privileges could gain unauthorized access to sensitive files on the system. This could lead to the exposure of confidential information.

Since the vulnerability has a high confidentiality impact (C:H) and a critical scope (S:C), it means that the attacker could access sensitive data without needing elevated privileges, potentially compromising the security of the affected device and any data it holds.

Useful 0 Not Useful 0