CVE-2016-7792

Ubiquiti Networks UniFi 5.2.7 does not restrict access to the database, which allows remote attackers to modify the database by directly connecting to it.

CVSS v3.0

8.8 HIGHCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

8.3 HIGHAV:A/AC:L/Au:N/C:C/I:C/A:C

EPSS

3.03% chance of exploitation in the next 30 days, 87th percentile

Published

2017-01-23

Updated

2024-08-06

Proof-of-concept exploits (1)

• https://packetstormsecurity.com/files/138928/Ubiquiti-UniFi-AP-AC-Lite-5.2.7-Improper-Acc…

References

• CVE Record
• NVD entry

Related

• CVE-2016-7791
• CVE-2016-7795
• CVE-2016-7790
• CVE-2016-7796
• CVE-2016-7786
• CVE-2016-7798