Instances of UniFi Network Application that (i) are run on a UniFi Gateway Console, and (ii) are versions 7.5.176. and earlier, implement device adoption with improper access control logic, creating a risk of access to device configuration information by a malicious actor with preexisting access to the network.

Affected Products:
UDM
UDM-PRO
UDM-SE
UDR
UDW

Mitigation:
Update UniFi Network to Version 7.5.187 or later.

Related CVEs

CVE-2023-41721

Key Information

GHSA ID

GHSA-46ph-452x-f4g5

Published

October 25, 2023 6:32 PM

Last Modified

October 25, 2023 6:32 PM

CVSS Score

9.0 /10

Primary Ecosystem

Unknown

Primary Package

Unknown

GitHub Reviewed

✗ No

Dataset

Last updated: August 2, 2025 6:46 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.