Insufficient Firmware Update Validation in UniFi Protect Cameras by Ubiquiti
CVE-2025-23117

6.8MEDIUM

Key Information:

Vendor

Ubiquiti Inc

Status
Unifi Protect Cameras
Vendor
CVE Published:
1 March 2025

What is CVE-2025-23117?

An Insufficient Firmware Update Validation vulnerability exists in UniFi Protect Cameras, allowing an authenticated attacker with network access to make unauthorized changes to the camera system. This can result in significant security risks within the network, as the integrity of the device's firmware may be compromised.

Affected Version(s)

UniFi Protect Cameras 4.74.106

References

https://community.ui.com/releases/Security-Advisory-Bulle...

CVSS V3.1

Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-23117 : Insufficient Firmware Update Validation in UniFi Protect Cameras by Ubiquiti