Ubiquiti warns of new max severity UniFi OS vulnerability
Summary
Ubiquiti has released security updates to address seven critical vulnerabilities in its UniFi OS. One of these flaws, rated at maximum severity, allows for command injection attacks.
IFF Assessment
A maximum severity vulnerability that allows for command injection is bad news for defenders as it can be actively exploited.
Severity
The article states a 'maximum severity flaw' that can be exploited for 'command injection attacks,' which strongly suggests a Critical CVSS score (e.g., 10.0) due to the high impact and exploitability.
Defender Context
This advisory highlights a critical vulnerability in Ubiquiti's UniFi OS, posing a significant risk to organizations relying on their network infrastructure. Defenders should prioritize patching these systems immediately to prevent potential command injection exploits and unauthorized access.