CVE-2020-27888
First published: Tue Oct 27 2020(Updated: )
An issue was discovered on Ubiquiti UniFi Meshing Access Point UAP-AC-M 4.3.21.11325 and UniFi Controller 6.0.28 devices. Cached credentials are not erased from an access point returning wirelessly from a disconnected state. This may provide unintended network access.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Ui Unifi Meshing Access Point Firmware | =4.3.21.11325 | |
| Ui Unifi Meshing Access Point | ||
| Ui Unifi Controller Firmware | =6.0.28 | |
| Ui Unifi Controller |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2020-27888?
The severity of CVE-2020-27888 is high with a severity value of 7.5.
Which devices are affected by CVE-2020-27888?
Ubiquiti UniFi Meshing Access Point UAP-AC-M 4.3.21.11325 and UniFi Controller 6.0.28 devices are affected by CVE-2020-27888.
What is the issue with CVE-2020-27888?
Cached credentials are not erased from an access point returning wirelessly from a disconnected state, which may provide unintended network access.
How can I fix CVE-2020-27888?
There is currently no fix available for CVE-2020-27888. It is recommended to follow the vendor's security advisory for updates.
Where can I find more information about CVE-2020-27888?
More information about CVE-2020-27888 can be found at the following reference: [link](https://community.ui.com/questions/Possible-authentication-bypass-for-access-into-LAN/7965adb2-5d70-4410-8467-4c7bec76bc00)
- collector/nvd-index
- agent/weakness
- agent/severity
- agent/references
- agent/author
- agent/description
- agent/type
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/ui
- canonical/ui unifi meshing access point firmware
- version/ui unifi meshing access point firmware/4.3.21.11325
- canonical/ui unifi meshing access point
- canonical/ui unifi controller firmware
- version/ui unifi controller firmware/6.0.28
- canonical/ui unifi controller