logo_clicknbuy.png

CVE-2025-27215 – Ubiquiti UniFi Connect Display Cast Insufficient Authentication Access Control Vulnerability

The following table lists the changes that have been made to the
CVE-2025-27215 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution
of a vulnerability, and for identifying the most recent changes that may
impact the vulnerability’s severity, exploitability, or other characteristics.

  • New CVE Received
    by [email protected]

    Aug. 21, 2025

    Action Type Old Value New Value
    Added Description An Improper Access Control could allow a malicious actor authenticated in the API of certain UniFi Connect Display Cast devices to make unsupported changes to the system.

    Affected Products:

    UniFi Connect Display Cast (Version 1.10.3 and earlier)
    UniFi Connect Display Cast Pro (Version 1.0.89 and earlier)
    UniFi Connect Display Cast Lite (Version 1.0.3 and earlier)

    Mitigation:

    Update UniFi Connect Display Cast to Version 1.10.7 or later
    Update UniFi Connect Display Cast Pro to Version 1.0.94 or later
    Update UniFi Connect Display Cast Lite to Version 1.1.8 or later
    Added Reference https://community.ui.com/releases/Security-Advisory-Bulletin-052-052/ac1251ee-5bb5-4cdf-8a71-68acd1775bb6
Share the Post:

Related Posts