UniFi Talk Application vulnerabilities
4 known vulnerabilities in UniFi Talk Application from Ubiquiti. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 10.0 Critical severity
A malicious actor with access to the network could exploit an Improper Input Validation…
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Talk Application to execute a Command Injection on the host device.
- 8.1 High severity
UniFi Talk Application: Improper Access Control
A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Talk Application to escalate privileges within the UniFi Talk Application.
- 7.5 High severity
UniFi Talk Application: Server-Side Request Forgery
A malicious actor with access to the network could exploit a Server-Side Request Forgery (SSRF) vulnerability found in UniFi Talk Application to execute a Denial of Service (DoS) attack and bypass authentication in certain UniFi Talk API endpoints.
- 9.9 Critical severity
UniFi Talk Application: Improper Neutralization of Special Elements used in an SQL Command
A malicious actor with access to the network and low privileges could exploit a series of authenticated SQL Injection vulnerabilities found in UniFi Talk Application to escalate privileges on the host device.