high7.5
CVE-2020-27888
An issue was discovered on Ubiquiti UniFi Meshing Access Point UAP-AC-M 4.3.21.11325 and UniFi Controller 6.0.28 devices.
Impact
An issue was discovered on Ubiquiti UniFi Meshing Access Point UAP-AC-M 4.3.21.11325 and UniFi Controller 6.0.28 devices. Cached credentials are not erased from an access point returning wirelessly from a disconnected state. This may provide unintended network access.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ui | Unifi Meshing Access Point Firmware | Version 4.3.21.11325 |
| Ui | Unifi Controller Firmware | Version 6.0.28 |