CVE-2024-42028: High severity ubiquiti unifi network controller vulnerability
A Local privilege escalation vulnerability found in a Self-Hosted UniFi Network Server with UniFi Network Application (Version 8.4.62 and earlier) allows a malicious actor with a local operational system user to execute high privilege actions on UniFi Network Server.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-42028?
The severity of CVE-2024-42028 is classified as high due to the potential for local privilege escalation.
How do I fix CVE-2024-42028?
To fix CVE-2024-42028, upgrade to UniFi Network Application version 8.4.63 or later.
What types of systems are affected by CVE-2024-42028?
CVE-2024-42028 affects self-hosted UniFi Network Servers running UniFi Network Application version 8.4.62 and earlier.
Who can exploit CVE-2024-42028?
A malicious actor with local access to the operational system user can exploit CVE-2024-42028.
What actions can be performed by exploiting CVE-2024-42028?
Exploiting CVE-2024-42028 allows the attacker to execute high privilege actions on the UniFi Network Server.