CVE-2025-27212
Published: Aug 4, 2025
Modified: Aug 5, 2025
Description
An Improper Input Validation in certain UniFi Access devices could allow a Command Injection by a malicious actor with access to UniFi Access management network. Affected Products: UniFi Access Reader Pro (Version 2.14.21 and earlier) UniFi Access G2 Reader Pro (Version 1.10.32 and earlier) UniFi Access G3 Reader Pro (Version 1.10.30 and earlier) UniFi Access Intercom (Version 1.7.28 and earlier) UniFi Access G3 Intercom (Version 1.7.29 and earlier) UniFi Access Intercom Viewer (Version 1.3.20 and earlier) Mitigation: Update UniFi Access Reader Pro Version 2.15.9 or later Update UniFi Access G2 Reader Pro Version 1.11.23 or later Update UniFi Access G3 Reader Pro Version 1.11.22 or later Update UniFi Access Intercom Version 1.8.22 or later Update UniFi Access G3 Intercom Version 1.8.22 or later Update UniFi Access Intercom Viewer Version 1.4.39 or later
| Vendor | Product | Versions |
|---|---|---|
Ubiquiti Inc | UniFi Access Reader Pro | affected 2.15.9 - < 2.15.9 |
Ubiquiti Inc | UniFi Access G2 Reader Pro | affected 1.11.23 - < 1.11.23 |
Ubiquiti Inc | UniFi Access G3 Reader Pro | affected 1.11.22 - < 1.11.22 |
Ubiquiti Inc | UniFi Access Intercom | affected 1.8.22 - < 1.8.22 |
Ubiquiti Inc | UniFi Access G3 Intercom | affected 1.8.22 - < 1.8.22 |
Ubiquiti Inc | UniFi Access Intercom Viewer | affected 1.4.39 - < 1.4.39 |
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now