Ubiquiti UniFi Improper Access Control Vulnerability Allowing Unauthorized System Changes

A vulnerability in Ubiquiti UniFi Play products, specifically in the PowerAmp version 1.0.35 and earlier and the Audio Port version 1.0.24 and earlier, allows malicious actors with access to the UniFi Play network to bypass access controls and enable SSH. This could lead to unauthorized changes on the system.

Impact

Exploitation of this vulnerability could result in unauthorized system modifications, potentially allowing for further exploitation or disruption of services.

Remediation

Users are advised to update UniFi Play PowerAmp to version 1.0.38 or later and UniFi Play Audio Port to version 1.1.9 or later.