CVE-2025-23119

Summary

An Improper Neutralization of Escape Sequences vulnerability could allow an Authentication Bypass with a Remote Code Execution (RCE) by a malicious actor with access to UniFi Protect Cameras adjacent network.

Affected Software

VendorProductVersion RangeStatus
Ubiquiti IncUniFi Protect Cameras4.74.106 < 4.74.106affected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References