CVE-2024-34786

MEDIUM EPSS 9.5%

Published Jul 9, 20241y ago · Modified Jun 17, 20261w ago

4.8 CVSS 3.1

Medium

Published Jul 9, 2024 1y ago

Last Modified Jun 17, 2026 1w ago

Description

UniFi iOS app 10.15.0 introduces a misconfiguration on 2nd Generation UniFi Access Points configured as standalone (not using UniFi Network Application) that could cause the SSID name to change and/or the WiFi Password to be removed on the 5GHz Radio. This vulnerability is fixed in UniFi iOS app 10.15.2 and later.

CVSS Details

Base Score

4.8

Exploitability

1.2

Impact

3.6

Vector string

CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

Attack Vector Adjacent

Attack Complexity High

Privileges Required None

User Interaction Required

Scope Unchanged

Confidentiality High

Integrity None

Availability None

Threat Intelligence

EPSS Exploit Probability

9.5% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

References 1

community.ui.com https://community.ui.com/releases/Security-Advisory-Bulletin-040-040/b4b508c0-8453-405b-8660-1f55ade669c0

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.