An out‑of‑bounds read flaw in the firmware of certain UniFi gateway devices permits a malicious actor who can reach the device over the network to trigger a device crash or reboot, effectively raising a denial‑of‑service condition. The read error does not provide remote code execution or privilege escalation, but it can suspend forwarding, authentication, or gateway services, disrupting downstream traffic for any clients that rely on the gateway. The vulnerability specifically falls under CWE‑125.

The flaw applies to Ubiquiti Inc. products including Cloud Gateways, Dream Machines, Dream Routers, Dream Wall, Enterprise Firewalls, Express series, Express 7, and UniFi Gateways. The advisory does not list affected firmware revisions, so any device running legacy or unpatched firmware in these product families should be considered potentially vulnerable.

The CVSS score of 7.5 indicates a high severity risk, and while no EPSS score is available, the lack of a public exploit and the fact that the attacker requires network connectivity to the device make exploitation somewhat limited. The vulnerability is not currently in the CISA KEV catalog. If an attacker can reach the gateway from a compromised or malicious network segment, they could repeatedly trigger the fault to render the gateway unusable, but the impact remains confined to the device itself and its direct client base.