CVE-2019-25651— Ubiquiti UniFi Devices Use of AES-CBC Allows Key Recovery and Unauthorized Device Control
Affected Version Matrix 6
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Ubiquiti | UniFi Network Controller | < 5.6.42 | affected |
5.6.43< 5.10.12 | affected | ||
| Ubiquiti | UniFi UAP Firmware | < 4.0.6 | affected |
| Ubiquiti | UniFi UAP-AC Firmware | < 3.8.17 | affected |
| Ubiquiti | UniFi USG Firmware | < 4.4.34 | affected |
| Ubiquiti | UniFi USW Firmware | < 4.0.6 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2019-25651
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Ubiquiti UniFi Devices Use of AES-CBC Allows Key Recovery and Unauthorized Device Control
Source: CVE Program / CVE List V5
Vulnerability Description
Ubiquiti UniFi Network Controller prior to 5.10.12 (excluding 5.6.42), UAP FW prior to 4.0.6, UAP-AC, UAP-AC v2, and UAP-AC Outdoor FW prior to 3.8.17, USW FW prior to 4.0.6, USG FW prior to 4.4.34 uses AES-CBC encryption for device-to-controller communication, which contains cryptographic weaknesses that allow attackers to recover encryption keys from captured traffic. Attackers with adjacent network access can capture sufficient encrypted traffic and exploit AES-CBC mode vulnerabilities to derive the encryption keys, enabling unauthorized control and management of network devices.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
使用已被攻破或存在风险的密码学算法
Source: CVE Program / CVE List V5
Vulnerability Title
Ubiquiti多款产品 加密问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Ubiquiti UniFi Network Controller等都是美国优比快（Ubiquiti）公司的产品。Ubiquiti UniFi Network Controller是一个集中管理与监控网络设备的控制软件平台。Ubiquiti UniFi UAP是一系列无线接入点。Ubiquiti UniFi UAP-AC是一系列无线接入点。 Ubiquiti多款产品存在加密问题漏洞，该漏洞源于AES-CBC加密存在加密弱点，可能导致攻击者从捕获的流量中恢复加密密钥。以下产品及版本受到影响：UniFi Ne
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Ubiquiti | UniFi Network Controller | 0 ~ 5.6.42 | - | |
| Ubiquiti | UniFi UAP Firmware | 0 ~ 4.0.6 | - | |
| Ubiquiti | UniFi UAP-AC Firmware | 0 ~ 3.8.17 | - | |
| Ubiquiti | UniFi USW Firmware | 0 ~ 4.0.6 | - | |
| Ubiquiti | UniFi USG Firmware | 0 ~ 4.4.34 | - |
II. Public POCs for CVE-2019-25651
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2019-25651
请登录查看更多情报信息。
Vendor Advisories for CVE-2019-25651 (1)
- Security Advisory Bulletin 004 | Ubiquiti Communityvendor-advisory
IV. Related Vulnerabilities
Same weakness: CWE-327
- CVE-2026-74888
openssl_encrypt before 1.4.0 Non-Standard PBKDF2 Key Derivat - CVE-2026-48386
ColdFusion | Use of a Broken or Risky Cryptographic Algorith - CVE-2026-66407
Hellohas Robotics DEEBOT PRO M1 加密问题漏洞 - CVE-2026-8470
Langflow is affected by weaknesses in secret handling and se - CVE-2026-56609
HCL iControl is affected by multiple security vulnerabilitie
V. Comments for CVE-2019-25651
No comments yet