CVE-2025-27213mediumCWE-863

CVE-2025-27213: medium-severity vulnerability in Ubiquiti Inc UniFi Connect EV Station Pro

Published

Follow this CVE+ Monitor UniFi Connect Display Cast+ Monitor UniFi Connect EV Station Pro

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4.9epss 0.2%
An Improper Access Control could allow a malicious actor authenticated in the API of certain UniFi Connect devices to enable Android Debug Bridge (ADB) and make unsupported changes to the system. Affected Products: UniFi Connect EV Station Pro (Version 1.5.18 and earlier) UniFi Connect Display (Version 1.9.324 and earlier) UniFi Connect Display Cast (Version 1.9.301 and earlier) UniFi Connect Display Cast Pro (Version 1.0.78 and earlier) UniFi Connect Display Cast Lite (Version 1.0.3 and earlier) Mitigation: Update UniFi Connect EV Station Pro to Version 1.5.27 or later Update UniFi Connect Display to Version 1.13.6 or later Update UniFi Connect Display Cast to Version 1.10.3 or later Update UniFi Connect Display Cast Pro to Version 1.0.83 or later Update UniFi Connect Display Cast Lite to Version 1.1.3 or later
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Affected products
Ubiquiti Inc · UniFi Connect DisplayUbiquiti Inc · UniFi Connect Display CastUbiquiti Inc · UniFi Connect Display Cast LiteUbiquiti Inc · UniFi Connect Display Cast ProUbiquiti Inc · UniFi Connect EV Station Pro
Related CVEs — Ubiquiti Inc UniFi Connect EV Station Pro

In the same product, most dangerous first.

CVE-2024-29206LOWCVE-2024-29206EPSS 0.4%CVE-2024-29207HIGHCVE-2024-29207EPSS 0.3%CVE-2025-27215HIGHCVE-2025-27215EPSS 0.3%