Unifi Switches
Approved changes feed: RSS · Atom
cpe:2.3:a:ubiquiti_inc:unifi_switches:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Ubiquiti Inc (c88e098a-16be-5454-a579-272623ec9dad) |
|---|---|
| Product | Unifi Switches (71226914-8aa3-52e7-833a-15f0b12a4312) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-22054 |
vulnerable | 2026-06-08 06:29:33.523193 |
Details available
A malformed discovery packet sent by a malicious actor with preexisting access to the network could interrupt the functionality of device management and discovery.
Affected Products:
UniFi Access Points
UniFi Switches
UniFi LTE Backup
UniFi Express (Only Mesh Mode, Router mode is not affected)
Mitigation:
Update UniFi Access Points to Version 6.6.55 or later.
Update UniFi Switches to Version 6.6.61 or later.
Update UniFi LTE Backup to Version 6.6.57 or later.
Update UniFi Express to Version 3.2.5 or later.
Published: 2024-02-20T17:14:34.212Z
Updated: 2025-03-27T20:55:19.431Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38034 |
vulnerable | 2026-06-08 06:08:16.759643 |
Details available
HIGH (8.3)
A command injection vulnerability in the DHCP Client function of all UniFi Access Points and Switches, excluding the Switch Flex Mini, could allow a Remote Code Execution (RCE).
Affected Products:
All UniFi Access Points (Version 6.5.53 and earlier)
All UniFi Switches (Version 6.5.32 and earlier)
-USW Flex Mini excluded.
Mitigation:
Update UniFi Access Points to Version 6.5.62 or later.
Update UniFi Switches to Version 6.5.59 or later.
Published: 2023-08-10T18:58:07.647Z
Updated: 2024-12-04T16:30:27.937Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-35085 |
vulnerable | 2026-06-08 06:06:26.495630 |
Details available
CRITICAL (9)
An integer overflow vulnerability in all UniFi Access Points and Switches, excluding the Switch Flex Mini, with SNMP Monitoring and default settings enabled could allow a Remote Code Execution (RCE).
Affected Products:
All UniFi Access Points (Version 6.5.50 and earlier)
All UniFi Switches (Version 6.5.32 and earlier)
-USW Flex Mini excluded.
Mitigation:
Update UniFi Access Points to Version 6.5.62 or later.
Update the UniFi Switches to Version 6.5.59 or later.
Published: 2023-08-10T18:58:17.222Z
Updated: 2024-12-04T16:30:50.323Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.