Security Advisory

CVE-2025-24285

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-08-21 00:01:24
Last updated 2026-02-26 17:48:21
Assigner hackerone
State PUBLISHED

Description

Multiple Improper Input Validation vulnerabilities in UniFi Connect EV Station Lite may allow a Command Injection by a malicious actor with network access to the UniFi Connect EV Station Lite. Affected Products: UniFi Connect EV Station Lite (Version 1.5.1 and earlier) Mitigation: Update UniFi Connect EV Station Lite to Version 1.5.2 or later