#CISA warns of max severity #Ubiquiti flaws exploited in attacks

https://www.bleepingcomputer.com/news/security/cisa-warns-of-max-severity-ubiquiti-flaws-exploited-in-attacks/

#cybersecurity

A critical CISA warning reveals Ubiquiti UniFi OS and Lantronix EDS5000 devices are under active attack. Max severity flaws (CVSS 10.0) are being chained for unauthenticated remote code execution, allowing attackers to create rogue admin accounts and fully compromise network infrastructure. Patching is urgent.

https://www.tpp.blog/1yc2rjr

#cybersecurity #cisa #ubiquiti

🤖 This post was AI-generated.

CISA Warns of Actively Exploited Ubiquiti Flaws

The US Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning that hackers are actively exploiting security flaws in Ubiquiti UniFi OS devices, posing a significant threat to system security. Federal agencies have just three days to apply crucial updates or recommended fixes to avoid potential breaches.

https://osintsights.com/cisa-warns-of-actively-exploited-ubiquiti-flaws?utm_source=mastodon&utm_medium=social

#Ubiquiti #Cisa #KnownExploitedVulnerabilities #Cve202634908 #Cve202634909

My Ubiquiti UDM 2020 appears to be dead. After the latest .15 update it was experiencing period drops of the management interface. RAM usage was much lower after the software upgrade, but CPU usage was much higher. With the recent heat wave and the fact that I have it in a small cabinet in the living room, I think it bit the dust. Now, no internet and shopping a replacement.

I put it in the fridge for 20 minutes to cool it down, and it's not still not powering on.

#Ubiquiti #networking #router

In prep for upcoming travel I pulled out my #Ubiquiti #UniFi Travel Router. They made some welcome improvements since I last tried it.

I can finally broadcast a second SSID. Yes it seems unnecessary but certain people like to bring an Echo Dot and it's a pain to join to a new network, then reconnect to our IOT network after.

The other interesting change is it can Bind To Site with my CloudKey. It couldn't before, I think due to lack of Teleport. (My remote access is WireGuard via pfSense.)