CVE-2024-34786 - CVE House
Back to Database
Status published Unknown CVE-2024-34786

UniFi iOS app 10.15.0 introduces a misconfiguration on 2nd Generation...

Vulnerability Description

UniFi iOS app 10.15.0 introduces a misconfiguration on 2nd Generation UniFi Access Points configured as standalone (not using UniFi Network Application) that could cause the SSID name to change and/or the WiFi Password to be removed on the 5GHz Radio. This vulnerability is fixed in UniFi iOS app 10.15.2 and later.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-34786

Credits & Attribution

No credits recorded in the NVD database.

References

More from Ubiquiti

View All →
CVE-2024-45205
An Improper Certificate Validation on the UniFi iOS App managing...
High 7.1
CVE-2024-37380
A misconfiguration on UniFi U6+ Access Point could cause an...
Medium 5.3
CVE-2023-41721
Instances of UniFi Network Application that (i) are run on...
Critical 10
CVE-2023-32000
A Cross-Site Scripting (XSS) vulnerability found in UniFi Network (Version...
Unknown 0
CVE-2023-31998
A heap overflow vulnerability found in EdgeRouters and Aircubes allows...
Medium 5.9

Affected Vendor

Affected Software

UniFi iOS App
Vulnerable Versions:
10.15.2

Timeline

Official Publish: July 9th, 2024
Last Modified: February 10th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.