description: A vulnerability found in UniFi Talk application V1.12.3 and earlier permits a malicious actor who has already gained access to a network to subsequently control Talk device(s) assigned to said network if they are not yet adopted. This vulnerability is fixed in UniFi Talk application V1.12.5 and later.
problem types: Code Injection (CWE-94)
affected:
{
product: UniFi Talk application
vendor: n/a
versions:
status: affected, version: Fixed on 1.12.5
}