CVE-2022-22570

Severity: critical (CVSS 10.0 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-04-01 · updated 2026-06-17
Weakness: CWE-120

Description

A buffer overflow vulnerability found in the UniFi Door Access Reader Lite’s (UA Lite) firmware (Version 3.8.28.24 and earlier) allows a malicious actor who has gained access to a network to control all connected UA devices. This vulnerability is fixed in Version 3.8.31.13 and later.

Affected products

UniFi Door Access Reader Lite: before 3.8.31.13 — fixed in 3.8.31.13

How to fix

Upgrade to a fixed version: UniFi Door Access Reader Lite 3.8.31.13. Check the vendor advisory for mitigations.

References

https://community.ui.com/releases/Security-Advisory-Bulletin-024-024/22725557-0f72-4f5d-83b0-f16252fcd4b7
https://community.ui.com/releases/Security-Advisory-Bulletin-024-024/22725557-0f72-4f5d-83b0-f16252fcd4b7

Get alerted when CVE-2022-22570 or the next vulnerability affects your stack