CVE-2024-27981

Published Apr 4, 2024

Last updated 7 months ago

Overview

Description
A Command Injection vulnerability found in a Self-Hosted UniFi Network Servers (Linux) with UniFi Network Application (Version 8.0.28 and earlier) allows a malicious actor with UniFi Network Application Administrator credentials to escalate privileges to root on the host device. Affected Products: UniFi Network Application (Version 8.0.28 and earlier) . Mitigation: Update UniFi Network Application to Version 8.1.113 or later.
Source
support@hackerone.com
NVD status
Awaiting Analysis

Social media

Hype score
Not currently trending

References