description: UniFi Cloud Key firmware < 1.1.6 contains a vulnerability that enables an attacker being able to change a device hostname by sending a malicious API request. This affects Cloud Key gen2 and Cloud Key gen2 Plus.
problem types: Improper Authentication - Generic (CWE-287)
affected:
{
product: UniFi Cloud Key Gen2
vendor: n/a
versions:
status: affected, version: Fixed in firmware >= 1.1.10
}