漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
A malicious actor with access to the UniFi Play network could exploit a Path Traversal vulnerability found in the device firmware to write files on the system that could be used for a remote code execution (RCE). Affected Products: UniFi Play PowerAmp (Version 1.0.35 and earlier)
UniFi Play Audio Port (Version 1.0.24 and earlier)
Mitigation: Update UniFi Play PowerAmp to Version 1.0.38 or later
Update UniFi Play Audio Port to Version 1.1.9 or later
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Vulnerability Title
Ubiquiti UniFi Play PowerAmp和Ubiquiti UniFi Play Audio Port 安全漏洞
Vulnerability Description
Ubiquiti UniFi Play PowerAmp和Ubiquiti UniFi Play Audio Port都是美国优比快（Ubiquiti）公司的产品。Ubiquiti UniFi Play PowerAmp是一款支持多房间音频分发与功放集成的家庭音频控制设备。Ubiquiti UniFi Play Audio Port是一款支持音频输入输出与网络化传输的家庭音频接入设备。 Ubiquiti UniFi Play PowerAmp 1.0.35及之前版本和Ubiquiti UniFi Play
CVSS Information
N/A
Vulnerability Type
N/A