CVE-2025-23123: Buffer Overflow
Published May 19, 2025
·Updated
A malicious actor with access to the management network could execute a remote code execution (RCE) by exploiting a heap buffer overflow vulnerability in the UniFi Protect Cameras (Version 4.75.43 and earlier) firmware.
Affected Software
1 affected component
Ubiquiti UniFi Protect Cameras<=4.75.43
Event History
May 19, 2025
CVE Published
via MITRE·01:25 AM
Data Sourced
via MITRE·01:25 AM
DescriptionSeverity
Data Sourced
via NVD·02:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-23123?
CVE-2025-23123 is considered a critical vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2025-23123?
To fix CVE-2025-23123, upgrade the firmware of UniFi Protect Cameras to version 4.75.44 or later.
3
Who is affected by CVE-2025-23123?
CVE-2025-23123 affects Ubiquiti UniFi Protect Cameras running firmware version 4.75.43 or earlier.
4
What type of attack does CVE-2025-23123 enable?
CVE-2025-23123 enables a remote code execution (RCE) attack if exploited.
5
Is there a workaround for CVE-2025-23123?
There are no specific workarounds for CVE-2025-23123; upgrading is the primary mitigation.