CVE-2024-27981: 
Ubiquiti UniFi vulnerability analysis and mitigation

A critical Command Injection vulnerability (CVE-2024-27981) was discovered in self-hosted UniFi Network Servers running on Linux with UniFi Network Application version 8.0.28 and earlier. The vulnerability was disclosed in April 2024 and affects Ubiquiti Networks' UniFi Network Application installations (Security Online, NVD).

The vulnerability has been assigned a Critical CVSS rating of 9.1 out of 10. It specifically affects self-hosted Linux installations of the UniFi Network Application. The vulnerability allows command injection attacks that can be executed by users who already possess administrator-level credentials within the UniFi Network Application (Security Online).

If successfully exploited, the vulnerability allows an attacker with UniFi Network Application Administrator credentials to escalate privileges to root level on the host device. With root-level access, attackers could potentially steal data, install malware, or disrupt critical network operations (Security Online).

The vulnerability requires the attacker to already have administrator credentials for the UniFi Network Application. This prerequisite somewhat limits the potential attack surface, though organizations should still treat this as a critical security issue given the severity of potential privilege escalation (NVD).

Ubiquiti has released a patch to address this vulnerability. Organizations are strongly advised to update their UniFi Network Application to version 8.1.113 or later to mitigate the risk (NVD).