The vulnerability is a Binding to an Unrestricted IP Address flaw in the WiFiman Desktop application for macOS. A network element that can reach the device can leverage the flaw to gather details about the host system, such as device identifiers, configuration settings, or other metadata. This exposure relies on the application listening on an interface that is not limited to a bound address, allowing collection of host data without authentication. The weakness is classified as CWE‑1327.

Ubiquiti Inc’s WiFiman Desktop for macOS. No specific affected versions were listed in the advisory.

The CVSS score of 7.5 marks this vulnerability as High; the EPSS score is not publicly available, and the issue is not listed in the CISA KEV catalog. An attacker who has network access to the device can exploit the unbound listening socket to obtain host information, making the attack a purely network-based vector. The lack of an exploit probability metric leaves the true risk uncertain, but the high severity suggests administrators should treat it as a serious threat.