CVE Vulnerabilities

CVE-2024-27981

Published: Apr 04, 2024 | Modified: Apr 05, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

A Command Injection vulnerability found in a Self-Hosted UniFi Network Servers (Linux) with UniFi Network Application (Version 8.0.28 and earlier) allows a malicious actor with UniFi Network Application Administrator credentials to escalate privileges to root on the host device.

Affected Products: UniFi Network Application (Version 8.0.28 and earlier) .

Mitigation: Update UniFi Network Application to Version 8.1.113 or later.

References