Security Advisory

CVE-2018-5264

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-06-07 15:26:24
Last updated 2024-08-05 05:33:43
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Ubiquiti UniFi 52 devices, when Hotspot mode is used, allow remote attackers to bypass intended restrictions on "free time" Wi-Fi usage by sending a /guest/s/default/ request to obtain a cookie, and then using this cookie in a /guest/s/default/login request with the byfree parameter.