TI-2024-24886 Aliases CVE-2024-37380 GHSA-r327-g4pc-7fww

A misconfiguration on UniFi U6+ Access Point could cause an incorrect VLAN traffic…

LOW 23Published 2024-07-22 · Updated 2024-11-05

Key facts

Attack vector: Adjacent network
Privileges required: None
User interaction: None
Attack complexity: High
Impact type: —
Confidentiality · integrity · availability: High · None · None
Fix status: Fixed

Attack profile from CVSS 3.0 · CNA. Fix status from CNA.

Summary

A misconfiguration on UniFi U6+ Access Point could cause an incorrect VLAN traffic forwarding to APs meshed to UniFi U6+ Access Point. Affected Products: UniFi U6+ Access Point (Version 6.6.65 and earlier) Mitigation: Update your UniFi U6+ Access Point to Version 6.6.74 or later.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00209 11th percentileScored 2026-11-07

Fix Fixed UniFi U6+ Access Point (Ubiquiti): 6.6.74

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Ubiquiti	UniFi U6+ Access Point	6.6.74 to before 6.6.74	6.6.74	Patch available	CNA

UniFi U6+ Access Point VendorUbiquiti Affected 6.6.74 to before 6.6.74 Fixed in 6.6.74 Patch available CNA

Remediation

Fix · CNA UniFi U6+ Access Point (Ubiquiti) Fixed in 6.6.74

Timeline

2026-10-02 Threatist record created from CVE-2024-37380
2026-10-03 Alias added: GHSA-r327-g4pc-7fww

References

Other 1

https://community.ui.com/releases/Security-Advisory-Bulletin-041-041/df92860f-0379-4002-be47-6819a25a73a1

TI-2026-27142 Improper input validation in Ubiquiti UniFi OS Server KEVCVSS 3.1CRITICAL 10.0
TI-2026-27141 Path traversal in Ubiquiti UniFi OS Server KEVCVSS 3.1CRITICAL 10.0
TI-2026-27140 Improper access control in Ubiquiti UniFi OS Server KEVCVSS 3.1CRITICAL 10.0
TI-2010-05027 On certain Ubiquiti devices, Command Injection exists via a GET request to stainfo.cgi… KEVCVSS 3.1CRITICAL 9.8
TI-2020-19187 AirControl 1.4.2 - PreAuth Remote Code Execution CVSS 4.0CRITICAL 9.3
TI-2015-07644 Ubiquiti airOS HTTP(S) unauthenticated arbitrary file upload CVSS 3.0CRITICAL 9.8

See all 206 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences