CVE-2025-23117
- State
- Published
- Severity
- 6.8 Medium
- Published
- Mar 1, 2025
- Updated
- Mar 5, 2025
- Reserved
- Jan 11, 2025
Description
An Insufficient Firmware Update Validation vulnerability could allow an authenticated malicious actor with access to UniFi Protect Cameras adjacent network to make unsupported changes to the camera system.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 6.8 Medium | CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H | CISA-ADP |
Weaknesses
- CWE-346 Origin Validation Error
Affected Products
| Product | Versions |
|---|---|
UniFi Protect CamerasUbiquiti Inc |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.