{"id":"CVE-2024-34786","aliases":["EUVD-2024-35052","GHSA-h62g-2c7p-qj54"],"status":"published","title":"UniFi iOS app 10.15.0 introduces a misconfiguration on 2nd Generation UniFi Access Points...","description":"UniFi iOS app 10.15.0 introduces a misconfiguration on 2nd Generation UniFi Access Points configured as standalone (not using UniFi Network Application) that could cause the SSID name to change and/or the WiFi Password to be removed on the 5GHz Radio.\n\nThis vulnerability is fixed in UniFi iOS app 10.15.2 and later.","severity":{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-09","score":0.00196,"percentile":0.09373,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2024-07-09T01:07:28Z","modified":"2026-06-17T07:34:03Z","products":[{"vendor":"ubiquiti","product":"unifi ios app"}],"references":[{"url":"https://community.ui.com/releases/Security-Advisory-Bulletin-040-040/b4b508c0-8453-405b-8660-1f55ade669c0","tags":["x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-34786"},{"url":"https://github.com/advisories/GHSA-h62g-2c7p-qj54"}],"sources":{"cve":[{"id":"CVE-2024-34786","description":"UniFi iOS app 10.15.0 introduces a misconfiguration on 2nd Generation UniFi Access Points configured as standalone (not using UniFi Network Application) that could cause the SSID name to change and/or the WiFi Password to be removed on the 5GHz Radio.\n\nThis vulnerability is fixed in UniFi iOS app 10.15.2 and later.","status":"published","published":"2024-07-09T01:07:28.069Z","modified":"2025-02-10T23:05:24.331Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"adp"}],"updated_at":"2026-11-02T14:34:23.193864Z"}],"euvd":[{"id":"EUVD-2024-35052","description":"UniFi iOS app 10.15.0 introduces a misconfiguration on 2nd Generation UniFi Access Points configured as standalone (not using UniFi Network Application) that could cause the SSID name to change and/or the WiFi Password to be removed on the 5GHz Radio.\n\nThis vulnerability is fixed in UniFi iOS app 10.15.2 and later.","status":"published","published":"2024-07-09T01:07:28Z","modified":"2025-02-10T23:05:24Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T00:04:00.239384Z"}],"ghsa":[{"id":"GHSA-h62g-2c7p-qj54","title":"UniFi iOS app 10.15.0 introduces a misconfiguration on 2nd Generation UniFi Access Points...","description":"UniFi iOS app 10.15.0 introduces a misconfiguration on 2nd Generation UniFi Access Points configured as standalone (not using UniFi Network Application) that could cause the SSID name to change and/or the WiFi Password to be removed on the 5GHz Radio.\n\nThis vulnerability is fixed in UniFi iOS app 10.15.2 and later.","status":"published","published":"2024-07-09T03:31:44Z","modified":"2025-02-11T00:32:44Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T14:59:51.679807Z"}],"nvd":[{"id":"CVE-2024-34786","description":"UniFi iOS app 10.15.0 introduces a misconfiguration on 2nd Generation UniFi Access Points configured as standalone (not using UniFi Network Application) that could cause the SSID name to change and/or the WiFi Password to be removed on the 5GHz Radio.\n\nThis vulnerability is fixed in UniFi iOS app 10.15.2 and later.","status":"published","published":"2024-07-09T02:15:10.177Z","modified":"2026-06-17T07:34:03.713Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"}],"updated_at":"2026-11-02T14:10:10.545705Z"}]}}