GCVE - cpe:2.3:a:ubiquiti_inc:unifi_protect_cameras:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ubiquiti_inc:unifi_protect_cameras:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Ubiquiti Inc (`c88e098a-16be-5454-a579-272623ec9dad`)
Product	Unifi Protect Cameras (`23c6fb58-831d-505f-ae31-269e42db2a75`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-23123`	vulnerable	2026-06-08 07:10:55.224486	Details available CRITICAL (10) A malicious actor with access to the management network could execute a remote code execution (RCE) by exploiting a heap buffer overflow vulnerability in the UniFi Protect Cameras (Version 4.75.43 and earlier) firmware. Published: 2025-05-19T01:25:08.467Z Updated: 2025-05-19T13:59:32.551Z Open on db.gcve.eu Reference links https://community.ui.com/releases/Security-Advisory-Bulletin-047-047/cef86c37-7421-44fd-b251-84e76475a5bc	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-23119`	vulnerable	2026-06-08 07:10:55.221191	Details available HIGH (7.5) An Improper Neutralization of Escape Sequences vulnerability could allow an Authentication Bypass with a Remote Code Execution (RCE) by a malicious actor with access to UniFi Protect Cameras adjacent network. Published: 2025-03-01T01:52:36.226Z Updated: 2025-03-04T19:07:42.185Z Open on db.gcve.eu Reference links https://community.ui.com/releases/Security-Advisory-Bulletin-046-046/9649ea8f-93db-4713-a875-c3fd7614943f	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-23118`	vulnerable	2026-06-08 07:10:55.220970	Details available MEDIUM (6.4) An Improper Certificate Validation vulnerability could allow an authenticated malicious actor with access to UniFi Protect Cameras adjacent network to make unsupported changes to the camera system. Published: 2025-03-01T01:52:36.138Z Updated: 2025-03-04T19:14:53.108Z Open on db.gcve.eu Reference links https://community.ui.com/releases/Security-Advisory-Bulletin-046-046/9649ea8f-93db-4713-a875-c3fd7614943f	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-23117`	vulnerable	2026-06-08 07:10:55.220732	Details available An Insufficient Firmware Update Validation vulnerability could allow an authenticated malicious actor with access to UniFi Protect Cameras adjacent network to make unsupported changes to the camera system. Published: 2025-03-01T01:52:36.149Z Updated: 2025-03-05T15:26:14.804Z Open on db.gcve.eu Reference links https://community.ui.com/releases/Security-Advisory-Bulletin-046-046/9649ea8f-93db-4713-a875-c3fd7614943f	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-23115`	vulnerable	2026-06-08 07:10:55.219441	Details available CRITICAL (9) A Use After Free vulnerability on UniFi Protect Cameras could allow a Remote Code Execution (RCE) by a malicious actor with access to UniFi Protect Cameras management network. Published: 2025-03-01T01:52:36.149Z Updated: 2025-03-13T17:49:18.227Z Open on db.gcve.eu Reference links https://community.ui.com/releases/Security-Advisory-Bulletin-046-046/9649ea8f-93db-4713-a875-c3fd7614943f	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.