CVE-2024-37380

{"id": "CVE-2024-37380", "cveTags": [], "metrics": {"cvssMetricV30": [{"type": "Secondary", "source": "support@hackerone.com", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 5.3, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 1.6}]}, "published": "2024-07-22T19:15:02.537", "references": [{"url": "https://community.ui.com/releases/Security-Advisory-Bulletin-041-041/df92860f-0379-4002-be47-6819a25a73a1", "source": "support@hackerone.com"}], "vulnStatus": "Awaiting Analysis", "descriptions": [{"lang": "en", "value": "A misconfiguration on UniFi U6+ Access Point could cause an incorrect VLAN traffic forwarding to APs meshed to UniFi U6+ Access Point.\n\n\nAffected Products:\nUniFi U6+ Access Point (Version 6.6.65 and earlier) \n\n \nMitigation:\nUpdate your UniFi U6+ Access Point to Version 6.6.74 or later.\n"}, {"lang": "es", "value": " Una mala configuraci\u00f3n en UniFi U6+ Access Point podr\u00eda causar un reenv\u00edo de tr\u00e1fico VLAN incorrecto a los AP conectados al punto de acceso UniFi U6+. Productos afectados: UniFi U6+ Access Point (Versi\u00f3n 6.6.65 y anteriores) Mitigaci\u00f3n: Actualice su UniFi U6+ UniFi U6+ Access Point a la versi\u00f3n 6.6.74 o posterior."}], "lastModified": "2024-07-24T12:55:13.223", "sourceIdentifier": "support@hackerone.com"}