Ubiquiti UniFi Protect Cameras Authentication Bypass and Remote Code Execution Vulnerability

A vulnerability allowing authentication bypass with subsequent remote code execution has been identified in Ubiquiti UniFi Protect Cameras running version 4.74.88 and earlier. This vulnerability arises from improper neutralization of escape sequences, and can be exploited by a malicious actor with access to the cameras' adjacent network.

Impact

Exploitation of this vulnerability could lead to unauthorized authentication and remote code execution on the affected camera system.

Remediation

Users are advised to update their UniFi Protect Cameras to version 4.74.106 or later.