CISA Warns of Actively Exploited Critical Ubiquiti Vulnerabilities

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an emergency warning about critical vulnerabilities in Ubiquiti and Lantronix equipment. According to the report, threat actors are already actively exploiting these flaws to launch attacks on corporate networks.

The vulnerabilities affect two types of devices: Ubiquiti's UniFi OS, used for managing network solutions, and Lantronix servers, which provide serial-to-Ethernet conversion. These flaws enable attackers to gain full control over the devices, opening avenues for further attacks on the company's infrastructure.

CISA has added these vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog and strongly urges administrators to apply security patches immediately. The agency emphasized that failing to update promptly could lead to severe consequences, including data leaks and full network compromise.

Vendors have already released patches to address the vulnerabilities. Experts advise disconnecting vulnerable devices from the network until updates are installed if immediate patching is not feasible. Special attention should be given to monitoring network traffic for suspicious activity.