CVE-2024-54750: Critical severity ubiquiti u6-series vulnerability
Ubiquiti U6-LR 6.6.65 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root. NOTE: In Ubiquiti's view there is no vulnerability as the Hardcoded Password should be after setup not before.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-54750?
CVE-2024-54750 is considered a critical vulnerability due to the existence of a hardcoded root password.
How do I fix CVE-2024-54750?
To mitigate CVE-2024-54750, it is recommended to change the hardcoded password after the initial setup of the Ubiquiti U6-LR.
What are the potential impacts of CVE-2024-54750?
CVE-2024-54750 may allow unauthorized access to the device, enabling attackers to gain root privileges.
Which products are affected by CVE-2024-54750?
CVE-2024-54750 affects the Ubiquiti U6-LR product.
Has Ubiquiti acknowledged CVE-2024-54750 as a vulnerability?
Ubiquiti views the hardcoded password issue in CVE-2024-54750 as not a vulnerability since it should be addressed post-setup.