Ubiquiti Inc Unifi Protect Cameras vulnerabilities

CVE-2025-23123 [CRITICAL] CWE-122 CVE-2025-23123: A malicious actor with access to the management network could execute a remote code execution (RCE) A malicious actor with access to the management network could execute a remote code execution (RCE) by exploiting a heap buffer overflow vulnerability in the UniFi Protect Cameras (Version 4.75.43 and earlier) firmware.

CVE-2025-23115 [CRITICAL] CWE-416 CVE-2025-23115: A Use After Free vulnerability on UniFi Protect Cameras could allow a Remote Code Execution (RCE) by A Use After Free vulnerability on UniFi Protect Cameras could allow a Remote Code Execution (RCE) by a malicious actor with access to UniFi Protect Cameras management network.

CVE-2025-23119 [HIGH] CWE-77 CVE-2025-23119: An Improper Neutralization of Escape Sequences vulnerability could allow an Authentication Bypass wi An Improper Neutralization of Escape Sequences vulnerability could allow an Authentication Bypass with a Remote Code Execution (RCE) by a malicious actor with access to UniFi Protect Cameras adjacent network.

CVE-2025-23117 [MEDIUM] CWE-346 CVE-2025-23117: An Insufficient Firmware Update Validation vulnerability could allow an authenticated malicious acto An Insufficient Firmware Update Validation vulnerability could allow an authenticated malicious actor with access to UniFi Protect Cameras adjacent network to make unsupported changes to the camera system.

CVE-2025-23118 [MEDIUM] CWE-295 CVE-2025-23118: An Improper Certificate Validation vulnerability could allow an authenticated malicious actor with a An Improper Certificate Validation vulnerability could allow an authenticated malicious actor with access to UniFi Protect Cameras adjacent network to make unsupported changes to the camera system.