Vulnerability details

CVE-2025-23115

Ubiquiti UniFi Protect Cameras

CVSS 3.0

9.0Critical

Official description

A Use After Free vulnerability on UniFi Protect Cameras could allow a Remote Code Execution (RCE) by a malicious actor with access to UniFi Protect Cameras management network.

CVSS scores

Score	Version	Source	Vector
9.0Critical	3.0	CVEProject cvelistV5 (CNA) (hackerone)	`CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H`

Affected products

Vendor	Product	Versions	Source
Ubiquiti Inc	UniFi Protect Cameras	4.74.106 ≤ v < 4.74.106	CVEProject cvelistV5 (CNA)

References and advisories

https://community.ui.com/releases/Security-Advisory-Bulletin-046-046/9649ea8f-93db-4713-a875-c3fd7614943f

Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published: 2025-03-01
Last updated: 2025-03-13
State: Published
Assigner (CNA): hackerone

Exploit prediction (EPSS)

0.71%

Probability of exploitation in 30 days

53.9%

Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable: No
Exploitation: None
Technical impact: Total

Weaknesses (CWE)

CWE-416
Use After Free