Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple cross-site request forgery (CSRF) vulnerabilities in Ubiquiti Networks UniFi Controller before 3.2.1 allow remote attackers to hijack the authentication of administrators for requests that (1) create a new admin user via a request to api/add/admin; (2) have unspecified impact via a request to api/add/wlanconf; change the guest (3) password, (4) authentication method, or (5) restricted subnets via a request to api/set/setting/guest_access; (6) block, (7) unblock, or (8) reconnect users by MAC address via a request to api/cmd/stamgr; change the syslog (9) server or (10) port via a request to api/set/setting/rsyslogd; (11) have unspecified impact via a request to api/set/setting/smtp; change the syslog (12) server, (13) port, or (14) authentication settings via a request to api/cmd/cfgmgr; or (15) change the Unifi Controller name via a request to api/set/setting/identity.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Ubiquiti Networks UniFi Controller 跨站请求伪造漏洞
Vulnerability Description
Ubiquiti Networks UniFi Controller是美国优比快（Ubiquiti Networks）公司的一套用于在单一平台中管理多个无线接入点设备的软件。 Ubiquiti Networks UniFi Controller 3.2.1之前版本中存在跨站请求伪造漏洞。远程攻击者可利用该漏洞创建新的管理员账户或造成其他危害。
CVSS Information
N/A
Vulnerability Type
N/A