UniFi Connect Display Cast Improper Access Control Vulnerability

A vulnerability exists in certain UniFi Connect Display Cast devices due to improper access control, allowing authenticated users of the API to make unsupported changes to the system. This issue affects multiple product versions, with the vulnerability arising from inadequate restrictions on user actions.

Impact

Exploitation of this vulnerability could lead to unauthorized modifications of the system settings or functionality on the affected devices.

Remediation

Users can update UniFi Connect Display Cast to version 1.10.7 or later, UniFi Connect Display Cast Pro to version 1.0.94 or later, and UniFi Connect Display Cast Lite to version 1.1.8 or later.