HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2019-5456

CVSS 8.1v3.1pub. 2019-07-30upd. 2024-11-21

SMTP MITM refers to a malicious actor setting up an SMTP proxy server between the UniFi Controller version <= 5.10.21 and their actual SMTP server to record their SMTP credentials for malicious use later.

CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Ui Unifi Controller

    APP
    Ui
    ≤ 5.10.21
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
References

Related vulnerabilities

CVE-2020-27888HIGH7.5same product

An issue was discovered on Ubiquiti UniFi Meshing Access Point UAP-AC-M 4.3.21.11325 and UniFi Controller 6.0....

CVE-2020-12695HIGH7.5same product

The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subs...

CVE-2014-2225HIGH8.8same product

Multiple cross-site request forgery (CSRF) vulnerabilities in Ubiquiti Networks UniFi Controller before 3.2.1 ...

CVE-2013-3572MEDIUM6.1same product

Cross-site scripting (XSS) vulnerability in the administer interface in the UniFi Controller in Ubiquiti Netwo...

CVE-2014-2226LOW2.6same product

Ubiquiti UniFi Controller przed wersją 3.2.1 loguje hash hasła administracyjnego w wiadomościach syslog, co um...