Ubiquiti device command injection vulnerability granting root access | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

		Ubiquiti device command injection vulnerability granting root access (sec-consult.com)
		3 points by sathackr on March 16, 2017 \| hide \| past \| favorite \| 3 comments

bigiain on March 17, 2017 | [–]

Who's gonna be first to rent a jet ski and go wardriving past Troy Hunt's house? (warsailing? warskiing?)

bigiain on March 17, 2017 | | [–]

A 1997 vintage version of PHP??? _Really?_ Ouch!

(Also, check out the Vendor contact timeline bit)

sathackr on March 17, 2017 | [–]

Remotely exploitable with a single GET request. Affects the vast majority of Ubiquiti devices.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact