Ubiquiti UniFi Play Path Traversal Vulnerability Leading to Remote Code Execution

A path traversal vulnerability has been identified in the UniFi Play network device firmware, allowing a malicious actor to write files on the system that could facilitate remote code execution. This vulnerability affects UniFi Play PowerAmp versions through 1.0.35 and UniFi Play Audio Port versions through 1.0.24.

Impact

Exploitation of this vulnerability could lead to unauthorized file writing on the system, potentially allowing for remote code execution.

Remediation

Users are advised to update UniFi Play PowerAmp to version 1.0.38 or later and UniFi Play Audio Port to version 1.1.9 or later.