VulnerabilityModified
CVE-2019-5456
SMTP MITM refers to a malicious actor setting up an SMTP proxy server between the UniFi Controller version <= 5.10.21 and their actual SMTP server to record their SMTP credentials for malicious use later.
HIGH 8.1EPSS 1.29%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (1.29%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
SMTP MITM refers to a malicious actor setting up an SMTP proxy server between the UniFi Controller version <= 5.10.21 and their actual SMTP server to record their SMTP credentials for malicious use later.
- CVSS 3.1
- 8.1 HIGHCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 1.29% probability · 69th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-300, CWE-255
- Affected
- ui/unifi controller
- Source
- support@hackerone.com
References
- https://community.ui.com/releases/862b962b-55f6-4324-96be-610f647d5c1cRelease Notes, Vendor Advisory
- https://community.ui.com/releases/9f698d0b-8279-40d3-9f1a-d36db4813124Release Notes, Vendor Advisory
- https://community.ui.com/releases/Security-Advisory-Bulletin-003-003/982bbaa8-2a07-4f81-a5f6-0bb84753f391Vendor Advisory
- https://hackerone.com/reports/519582Permissions Required
- https://community.ui.com/releases/862b962b-55f6-4324-96be-610f647d5c1cRelease Notes, Vendor Advisory
- https://community.ui.com/releases/9f698d0b-8279-40d3-9f1a-d36db4813124Release Notes, Vendor Advisory
- https://community.ui.com/releases/Security-Advisory-Bulletin-003-003/982bbaa8-2a07-4f81-a5f6-0bb84753f391Vendor Advisory
- https://hackerone.com/reports/519582Permissions Required
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.