A malicious actor with network access and low local privileges could exploit a weakness that allows improper access control on UniFi OS devices. This lack of proper authorization checks enables the attacker to elevate rights within the firmware or services running on those devices, potentially giving them full control over the device's configuration and data.

Devices impacted include a wide range of Ubiquiti products running UniFi OS, such as Cloud Gateways, Cloud Keys, Dream Machines, Dream Routers, Dream Wall, Enterprise Firewall Core, Enterprise Fortress Gateway, Enterprise Network Attached Storage, Enterprise Network Video Recorders, Express 7, Network Attached Storage, Network Video Recorders, and UniFi OS Server.

The CVSS score of 9.9 reflects a critical severity, indicating a high likelihood that an attacker could succeed. Because the EPSS score is unavailable, the current exploitation probability cannot be quantified, but the vulnerability is not currently listed in CISA's KEV catalog. The attack is likely to occur from an attacker who already has some network presence and low privileges, such as a compromised workstation or untrusted device connected to the same LAN. By leveraging the access control flaw, a local attacker can gain elevated system privileges, allowing configuration changes, data theft, or further lateral movement.