Affected Systems
Ubiquiti UniFi OS and Lantronix serial-to-ethernet servers. Specific affected versions not disclosed in summary. Both products commonly deployed in enterprise network infrastructure and IoT/OT environments.
Exploitation Status
Active exploitation confirmed by CISA. Attackers are leveraging these vulnerabilities in live attacks. CVE identifiers not yet assigned or disclosed.
Business Impact
Maximum severity rating indicates potential for complete system compromise. UniFi OS manages network controllers, switches, and access points—compromise could enable lateral movement, traffic interception, or persistent network access. Lantronix devices bridge serial industrial equipment to IP networks—exploitation may expose OT/ICS environments. Immediate risk to confidentiality, integrity, and availability of affected infrastructure.
Urgency
🔴 Immediate
Recommended Actions
- Identify all Ubiquiti UniFi OS devices and Lantronix serial-to-ethernet servers in your environment using asset inventory and network scanning
- Isolate affected devices from internet exposure and restrict management access to trusted internal networks only via firewall rules
- Check vendor security advisories from Ubiquiti and Lantronix for emergency patches and apply immediately when available
- Monitor logs from affected devices and upstream firewalls for unusual authentication attempts, configuration changes, or outbound connections
- If patches are unavailable and devices cannot be isolated, consider taking non-critical systems offline until remediation is possible