Ubiquiti is suing Brian Krebs for his reporting on their breach

Re:Ubiquiti is suing Brian Krebs for his reporting on their ... by postpawl on Tuesday March 29, 2022 @10:35PM (#30850943)

Can you send a link to reports of that issue on their standalone access points? Might just be their routers?

[ Parent | on HN ]

Re:Ubiquiti is suing Brian Krebs for his reporting on their ... by mike_d on Tuesday March 29, 2022 @10:41PM (#30850980)

There are thousands of issues. I updated my comment with a few examples.

They suffer from extremely poor code quality, a complete lack of understanding of security, and severe code reuse without recording what devices the code ends up in. You can take existing TP-Link exploits, poke around in a new model of device, and often find the same vulnerable endpoint under a new "hidden" URL.

Edit: to address your specific question, CVE-2021-35004 is RCE against both routers and standalone APs.

[ Parent | on HN ]