What’s Vulnerable › Vulnerabilities

CVE-2024-37380

• Severity: medium (CVSS 5.3 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-07-22 · updated 2026-06-17

Description

A misconfiguration on UniFi U6+ Access Point could cause an incorrect VLAN traffic forwarding to APs meshed to UniFi U6+ Access Point. Affected Products: UniFi U6+ Access Point (Version 6.6.65 and earlier) Mitigation: Update your UniFi U6+ Access Point to Version 6.6.74 or later.

Affected products

• Ubiquiti UniFi U6+ Access Point: from 6.6.74 before 6.6.74 — fixed in 6.6.74

How to fix

Upgrade to a fixed version: Ubiquiti UniFi U6+ Access Point 6.6.74. Check the vendor advisory for mitigations.

References

• https://community.ui.com/releases/Security-Advisory-Bulletin-041-041/df92860f-0379-4002-be47-6819a25a73a1
• https://community.ui.com/releases/Security-Advisory-Bulletin-041-041/df92860f-0379-4002-be47-6819a25a73a1

Get alerted when CVE-2024-37380 or the next vulnerability affects your stack