description: SMTP MITM refers to a malicious actor setting up an SMTP proxy server between the UniFi Controller version <= 5.10.21 and their actual SMTP server to record their SMTP credentials for malicious use later.
problem types: Man-in-the-Middle (CWE-300)
affected:
{
product: UniFi
vendor: UniFi
versions:
status: affected, version: <= 5.10.21
}