CVE-2020-8148

CVE-2020-8148

Vendor N/A

Product UniFi Cloud Key Gen2

Weakness CWE-287 · Improper authentication

Published April 13, 2020

Last update August 4, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

UniFi Cloud Key firmware < 1.1.6 contains a vulnerability that enables an attacker being able to change a device hostname by sending a malicious API request. This affects Cloud Key gen2 and Cloud Key gen2 Plus.

Key dates

02Disclosure timeline

April 13, 2020 CVE published

August 4, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2020-8148 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/287.html

Related vulnerabilities

01Description

02Disclosure timeline

03References

04Related CVE