CVE-2024-29208

An Unverified Password Change could allow a malicious actor with API access to the device to change the system password without knowing the previous password.<br /> <br /> <br /> <br /> Affected Products:<br /> <br /> UniFi Connect EV Station (Version 1.1.18 and earlier) <br /> <br /> UniFi Connect EV Station Pro (Version 1.1.18 and earlier)<br /> <br /> UniFi Connect Display (Version 1.9.324 and earlier)<br /> <br /> UniFi Connect Display Cast (Version 1.6.225 and earlier)<br /> <br /> <br /> <br /> Mitigation:<br /> <br /> Update UniFi Connect Application to Version 3.10.7 or later.<br /> <br /> Update UniFi Connect EV Station to Version 1.2.15 or later.<br /> <br /> Update UniFi Connect EV Station Pro to Version 1.2.15 or later.<br /> <br /> Update UniFi Connect Display to Version 1.11.348 or later.<br /> <br /> Update UniFi Connect Display Cast to Version 1.8.255 or later.