A severe security flaw has been identified in Ubiquiti UniFi Protect Cameras, enabling potential attackers to remotely execute arbitrary code.
This vulnerability, rated with the maximum CVSS score of 10.0, affects all camera firmware versions up to 4.75.43, urging users to update their devices without delay.
Designated as CVE-2025-23123, the issue stems from a heap buffer overflow in the camera firmware, which allows attackers to execute remote code (RCE).
Urgent RCE Threat in UniFi Protect Cameras
Ubiquiti’s Security Advisory Bulletin outlines that an attacker with access to the management network can exploit this vulnerability to execute arbitrary code remotely via the heap buffer overflow flaw in the affected camera firmware.
Receiving the highest CVSS rating is a clear indicator of the vulnerability’s severity. The CVSS vector – CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H – shows that the flaw does not require user interaction and can be exploited remotely through the network, posing a risk of full system compromise.
This heap buffer overflow vulnerability could enable attackers to:
- Take full control of the camera systems
- Intercept and monitor surveillance footage
- Alter video recordings and live feeds
- Use compromised cameras as a gateway for deeper attacks within a secured network
Mathew Marcus, the security expert who discovered the flaw, highlighted the risk posed by improperly segmented networks, especially in home and small business settings. Such networks are often vulnerable to exploitation due to the lack of robust network isolation.
| Risk Factors | Details |
|---|---|
| Affected Products | UniFi Protect Cameras (Firmware Version 4.75.43 and earlier) |
| Impact | Remote Code Execution (RCE) |
| Exploitation Requirements | Access to the management network; no special privileges or user interaction needed |
| CVSS 3.1 Score | 10.0 (Critical) |
Mitigation Actions
Ubiquiti strongly recommends that all users of UniFi Protect Cameras promptly upgrade to firmware version 4.75.62 or newer to resolve the critical vulnerability. This update can be applied through the usual UniFi firmware update procedure.
Additionally, Ubiquiti has revealed a secondary, less severe flaw (CVE-2025-23164) affecting UniFi Protect Application versions 5.3.41 and earlier. This issue arises from a misconfigured access token system that might allow unauthorized access to livestream feeds even after deactivation links have been removed.
To remedy this, users should upgrade to UniFi Protect Application version 5.3.45 or later.
This is not the first time Ubiquiti has faced significant vulnerabilities within its UniFi Protect ecosystem. Earlier in the year, critical flaws such as CVE-2025-23115 and CVE-2025-23116 were discovered, which also impacted the camera systems.
Organizations using UniFi Protect cameras are encouraged to implement robust network segmentation as an added layer of security to reduce the potential impact of such vulnerabilities, even after applying the latest firmware updates.
