Vulnerability in Ubiquiti Inc Unifi Connect Display Cast
CVE-2025-27215
An Improper Access Control could allow a malicious actor authenticated in the API of certain UniFi Connect Display Cast devices to make unsupported changes to the system. Affected Products: UniFi Connect Display Cast (Version 1.10.3 and earlier) UniFi Connect Display Cast Pro (Version 1.0.89 and earlier) UniFi Connect Display Cast Lite (Version 1.0.3 and earlier) Mitigation: Update UniFi Connect Display Cast to Version 1.10.7 or later Update UniFi Connect Display Cast Pro to Version 1.0.94 or later Update UniFi Connect Display Cast Lite to Version 1.1.8 or later
EPSS: 0.003 (17.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N.
Affected products
- Ubiquiti Inc Unifi Connect Display Cast — versions 1.10.7
- Ubiquiti Inc Unifi Connect Display Cast Lite — versions 1.1.8
- Ubiquiti Inc Unifi Connect Display Cast Pro — versions 1.0.94
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2025-27215?
- CVE-2025-27215 is a high-severity vulnerability in Ubiquiti Inc Unifi Connect Display Cast, classified under Improper Access Control. CVSS score: 8.1/10. Published 2025-08-21.
- How severe is CVE-2025-27215?
- High severity. CVSS v3 base score is 8.1 out of 10.