VULNERABILITY INTELLIGENCE

CVE-2017-0913

CVSS score4.7 MEDIUM
EPSS probability0.30%
CISA KEVNot currently listed
Published2018-07-03
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

Ubiquiti UCRM versions 2.3.0 to 2.7.7 allow an authenticated user to read arbitrary files in the local file system. Note that by default, the local file system is isolated in a docker container. Successful exploitation requires valid credentials to an account with "Edit" access to "System Customization".

Weakness classification

  • CWE-732: Incorrect Permission Assignment for Critical Resource

Primary references