CVE-2024-54750

Summary

CVE-2024-54750 is a newly disclosed vulnerability affecting Ubiquiti U6-LR devices running version 6.6.65. This issue involves a hardcoded password in the /etc/shadow file that can be exploited, granting attackers root access. Despite Ubiquiti's stance, this vulnerability poses a significant security risk as the hardcoded password is present before the setup process, making it accessible to potential attackers. It is important for Ubiquiti users to update their devices to a patched version as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.