QwikSec

Security Database

CVE

CWE

Training

CVE-2021-22952

Published: Sep 23, 2021

Modified: Aug 3, 2024

PUBLISHED

Description

A vulnerability found in UniFi Talk application V1.12.3 and earlier permits a malicious actor who has already gained access to a network to subsequently control Talk device(s) assigned to said network if they are not yet adopted. This vulnerability is fixed in UniFi Talk application V1.12.5 and later.

Vendor	Product	Versions
n/a	UniFi Talk application	affected `Fixed on 1.12.5`

Weaknesses (CWE)

References

https://community.ui.com/releases/Security-Advisory-Bulletin-020-020/8ce6a7e6-0cce-4814-8bbe-ee812cb94b1a

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.