CVE-2021-44527

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-12-07 · updated 2026-06-17
Weakness: CWE-400

Description

A vulnerability found in UniFi Switch firmware Version 5.43.35 and earlier allows a malicious actor who has already gained access to the network to perform a Deny of Service (DoS) attack on the affected switch.This vulnerability is fixed in UniFi Switch firmware 5.76.6 and later.

Affected products

UniFi Switches: before 5.76.6 — fixed in 5.76.6

How to fix

Upgrade to a fixed version: UniFi Switches 5.76.6. Check the vendor advisory for mitigations.

References

https://community.ui.com/releases/Security-Advisory-Bulletin-022-022/cd83c01b-33e4-454a-b3b9-1c3ccebea7cb
https://community.ui.com/releases/Security-Advisory-Bulletin-022-022/cd83c01b-33e4-454a-b3b9-1c3ccebea7cb

Get alerted when CVE-2021-44527 or the next vulnerability affects your stack