GCVE - cpe:2.3:h:ui:unifi_dream_machine_pro:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:ui:unifi_dream_machine_pro:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Ui (`05cd6c40-c92e-5edc-9588-6ff25fd55039`)
Product	Unifi Dream Machine Pro (`14d0c5d3-35a4-51f2-a727-4a8c7015ea7a`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-41721`	not_vulnerable	2026-06-08 06:11:06.799309	Details available CRITICAL (10) Instances of UniFi Network Application that (i) are run on a UniFi Gateway Console, and (ii) are versions 7.5.176. and earlier, implement device adoption with improper access control logic, creating a risk of access to device configuration information by a malicious actor with preexisting access to the network. Affected Products: UDM UDM-PRO UDM-SE UDR UDW Mitigation: Update UniFi Network to Version 7.5.187 or later. Published: 2023-10-25T00:24:34.072Z Updated: 2024-09-13T16:28:08.626Z Open on db.gcve.eu Reference links https://community.ui.com/releases/Security-Advisory-Bulletin-036-036/81367bc9-2a64-4435-95dc-bbe482457615	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-24104`	not_vulnerable	2026-06-08 05:56:05.160354	Details available Ubiquiti Networks UniFi Dream Machine Pro v7.2.95 allows attackers to bypass domain restrictions via crafted packets. Published: 2023-02-23T00:00:00.000Z Updated: 2025-03-18T14:59:37.915Z Open on db.gcve.eu Reference links https://github.com/f1veT/BUG/issues/1 https://attack.mitre.org/techniques/T1090/004/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-22882`	not_vulnerable	2026-06-08 05:30:01.700688	Details available UniFi Protect before v1.17.1 allows an attacker to use spoofed cameras to perform a denial-of-service attack that may cause the UniFi Protect controller to crash. Published: 2021-02-23T18:28:45.000Z Updated: 2024-08-03T18:58:24.777Z Open on db.gcve.eu Reference links https://hackerone.com/reports/1008579 https://community.ui.com/releases/Security-advisory-bulletin-017-017/071141e5-bc2e-4b71-81f3-5e499316fcee	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-8188`	not_vulnerable	2026-06-08 05:27:15.128906	Details available We have recently released new version of UniFi Protect firmware v1.13.3 and v1.14.10 for Unifi Cloud Key Gen2 Plus and UniFi Dream Machine Pro/UNVR respectively that fixes vulnerabilities found on Protect firmware v1.13.2, v1.14.9 and prior according to the description below:View only users can run certain custom commands which allows them to assign themselves unauthorized roles and escalate their privileges. Published: 2020-07-02T18:35:14.000Z Updated: 2024-08-04T09:56:28.305Z Open on db.gcve.eu Reference links https://community.ui.com/releases/Security-advisory-bulletin-012-012/1bba9134-f888-4010-81c0-b0dd53b9bda4 https://community.ui.com/releases/UniFi-Protect-1-13-3/f4be7d35-93a3-422b-8eef-122e442c00ba https://community.ui.com/releases/UniFi-Protect-1-14-10/48a8dbdd-b872-47fa-bbde-1d24ddf5d5b5	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.