An improper access control flaw (CWE‑284) exists in Ubiquiti UniFi Play PowerAmp and Audio Port devices, allowing a malicious actor with local network access to retrieve the WiFi credentials stored on the device by bypassing authorization checks on configuration endpoints. The consequence is the exposure of sensitive authentication information that could enable unauthorized entry into the local network.

The vulnerability affects Ubiquiti Inc’s UniFi Play PowerAmp firmware versions 1.0.35 and earlier, and UniFi Play Audio Port firmware versions 1.0.24 and earlier. The impacted devices are audio amplification appliances used in residential or small‑business environments.

The CVSS score of 7.5 reflects a moderate to high severity. EPSS data is not available, and the vulnerability is not listed in the CISA KEV catalog, suggesting that it has not yet been widely exploited. Based on the description, it is inferred that the attack vector is a host on the same local network, as authentication is not required to retrieve the stored credentials. An attacker could simply send crafted requests to the affected device and obtain the WiFi credentials, potentially enabling further compromise of the local network.