Ubiquiti UniFi Connect EV Station Lite Command Injection Vulnerability
Vulnerability
A command injection vulnerability has been identified in UniFi Connect EV Station Lite versions through 1.5.1. This vulnerability arises from multiple improper input validation issues, which may allow a malicious actor with network access to the EV Station Lite to execute arbitrary commands.
Impact
Exploitation of this vulnerability could lead to unauthorized command execution on the affected device.
Remediation
Users are advised to update UniFi Connect EV Station Lite to version 1.5.2 or later.
Added: Aug 21, 2025, 1:21 AM
Updated: Aug 21, 2025, 1:21 AM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
7.5exploitability
7.4remediation
7.7relevance
0.4threat
0.0urgency
2.9incentive
5.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.