Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2019-25651— Ubiquiti UniFi Devices Use of AES-CBC Allows Key Recovery and Unauthorized Device Control

Quick assessment

Affected
Ubiquiti UniFi Network Controller
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Ubiquiti UniFi Network Controller等都是美国优比快（Ubiquiti）公司的产品。Ubiquiti UniFi Network Controller是一个集中管理与监控网络设备的控制软件平台。Ubiquiti UniFi UAP是一系列无线接入点。Ubiquiti UniFi UAP-AC是一系列无线接入点。 Ubiquiti多款产品存在加密问题漏洞，该漏洞源于AES-CBC加密存在加密弱点，可能导致攻击者从捕获的流量中恢复加密密钥。以下产品及版本受到影响：UniFi Ne

CVSS 8.3 · High EPSS 0.08% · P0

Affected Version Matrix 6

VendorProduct Version RangeStatus
Ubiquiti UniFi Network Controller < 5.6.42 affected
5.6.43< 5.10.12 affected
Ubiquiti UniFi UAP Firmware < 4.0.6 affected
Ubiquiti UniFi UAP-AC Firmware < 3.8.17 affected
Ubiquiti UniFi USG Firmware < 4.4.34 affected
Ubiquiti UniFi USW Firmware < 4.0.6 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2019-25651

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Ubiquiti UniFi Devices Use of AES-CBC Allows Key Recovery and Unauthorized Device Control
Source: CVE Program / CVE List V5
Vulnerability Description
Ubiquiti UniFi Network Controller prior to 5.10.12 (excluding 5.6.42), UAP FW prior to 4.0.6, UAP-AC, UAP-AC v2, and UAP-AC Outdoor FW prior to 3.8.17, USW FW prior to 4.0.6, USG FW prior to 4.4.34 uses AES-CBC encryption for device-to-controller communication, which contains cryptographic weaknesses that allow attackers to recover encryption keys from captured traffic. Attackers with adjacent network access can capture sufficient encrypted traffic and exploit AES-CBC mode vulnerabilities to derive the encryption keys, enabling unauthorized control and management of network devices.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
使用已被攻破或存在风险的密码学算法
Source: CVE Program / CVE List V5
Vulnerability Title
Ubiquiti多款产品 加密问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Ubiquiti UniFi Network Controller等都是美国优比快（Ubiquiti）公司的产品。Ubiquiti UniFi Network Controller是一个集中管理与监控网络设备的控制软件平台。Ubiquiti UniFi UAP是一系列无线接入点。Ubiquiti UniFi UAP-AC是一系列无线接入点。 Ubiquiti多款产品存在加密问题漏洞，该漏洞源于AES-CBC加密存在加密弱点，可能导致攻击者从捕获的流量中恢复加密密钥。以下产品及版本受到影响：UniFi Ne
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Ubiquiti UniFi Network Controller 0 ~ 5.6.42 -
Ubiquiti UniFi UAP Firmware 0 ~ 4.0.6 -
Ubiquiti UniFi UAP-AC Firmware 0 ~ 3.8.17 -
Ubiquiti UniFi USW Firmware 0 ~ 4.0.6 -
Ubiquiti UniFi USG Firmware 0 ~ 4.4.34 -

II. Public POCs for CVE-2019-25651

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2019-25651

请登录查看更多情报信息。

Vendor Advisories for CVE-2019-25651 (1)

IV. Related Vulnerabilities

Same product: UniFi Network Controller
Same vendor: Ubiquiti
Same weakness: CWE-327

V. Comments for CVE-2019-25651

No comments yet

Leave a comment