CVE-2014-2226

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.45%

Published

Jul 29, 2014

Modified

May 6, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Ubiquiti UniFi Controller before 3.2.1 logs the administrative password hash in syslog messages, which allows man-in-the-middle attackers to obtain sensitive information via unspecified vectors.

Weaknesses (CWE)

CWE-255

Affected Products (1)

ui · unifi_controllervulnerable

References (8)

http://packetstormsecurity.com/files/127616/Ubiquiti-UbiFi-Controller-2.4.5-Password-Hash-Disclosure.html

http://seclists.org/fulldisclosure/2014/Jul/127

http://sethsec.blogspot.com/2014/07/cve-2014-2226.html

http://www.securityfocus.com/bid/68869

http://packetstormsecurity.com/files/127616/Ubiquiti-UbiFi-Controller-2.4.5-Password-Hash-Disclosure.html

http://seclists.org/fulldisclosure/2014/Jul/127

http://sethsec.blogspot.com/2014/07/cve-2014-2226.html

http://www.securityfocus.com/bid/68869

KEV Catalog EPSS Scores Vendors All CVEs