Since yesterday, users of Ubiquiti networking devices, ranging from routers to security cameras, have reported seeing other people's devices and notifications through the company's UniFi cloud services.
Ubiquiti is a popular networking device manufacturer offering a cloud-based UniFi platform where admins can manage all their devices from a single cloud portal.
The first report of these issues was from yesterday morning at around 8 AM ET when a Ubiquiti customer incorrectly received a notification through UniFi Protect from someone else's security camera.
To make matters worse, another Ubiquiti customer says that when they logged into the UniFi Site Manager portal to manage their devices, they saw 88 devices from another customer's account.
A similar experience occurred with others on Reddit who says they logged in and had access to someone else's UDM Pro and were able to manage the device and create additional WiFi networks.
In both situations, once the portal web page was refreshed, they were shown the devices usually associated with their accounts.
When BleepingComputer contacted Ubiquiti about these issues, we were told they are currently gathering information to assess what is causing the issues.
Ubiquiti says that they will issue a statement after the review is complete.
Employees have already started gathering information on Reddit and the company's forums, reaching out to impacted customers to learn more about what happened.
Some customers are skeptical that this is actually happening, saying that Ubiquiti should be given time to investigate the issue.
Other customers are frustrated that Ubiquiti is not coming forth with a public statement or listing it as a potential issue on the company's network status page, considering that users are reporting that they can modify other's networking configurations.
Over 40,000 Cisco IOS XE devices infected with backdoor using zero-day.
Hackers start exploiting critical ownCloud flaw, patch now.
Google Drive users angry over losing months of stored data.
This Cyber News was published on www.bleepingcomputer.com. Publication date: Thu, 14 Dec 2023 20:45:07 +0000