# UI vulnerabilities > UI has 81 published vulnerabilities across 257 products in our catalogue. 1 of them is on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Er-X, with 9. If you run UI software, patch the exploited flaws first. Canonical page: https://www.precursorintelligence.com/vendors/ui ## At a glance - **Published vulnerabilities:** 81 - **Known to be exploited:** 1 - **Products:** 257 - **Versions:** 501 - **Most recently added to the known-exploited list:** [CVE-2010-5330](https://www.precursorintelligence.com/what-is/cve-2010-5330), 15 April 2022. We keep watching the list. ## Which UI products have the most vulnerabilities? - [Er-X](https://www.precursorintelligence.com/product/ui/er-x): 9 published vulnerabilities, 0 versions - [Er-X-Sfp](https://www.precursorintelligence.com/product/ui/er-x-sfp): 9 published vulnerabilities, 0 versions - [Er-X Firmware](https://www.precursorintelligence.com/product/ui/er-x_firmware): 8 published vulnerabilities, 5 versions - [Er-X-Sfp Firmware](https://www.precursorintelligence.com/product/ui/er-x-sfp_firmware): 8 published vulnerabilities, 5 versions - [Unifi Video](https://www.precursorintelligence.com/product/ui/unifi_video): 7 published vulnerabilities, 31 versions - [Unifi Controller](https://www.precursorintelligence.com/product/ui/unifi_controller): 6 published vulnerabilities, 9 versions - [Es-48-Lite](https://www.precursorintelligence.com/product/ui/es-48-lite): 5 published vulnerabilities, 0 versions - [Es-16-150w](https://www.precursorintelligence.com/product/ui/es-16-150w): 5 published vulnerabilities, 0 versions - [Es-8-150w](https://www.precursorintelligence.com/product/ui/es-8-150w): 5 published vulnerabilities, 0 versions - [Edgeswitch Firmware](https://www.precursorintelligence.com/product/ui/edgeswitch_firmware): 5 published vulnerabilities, 4 versions Each product page lists its own known-exploited flaws. ## Which UI vulnerabilities are being exploited? 1 flaw is on the government list of vulnerabilities known to be exploited, newest first: - [CVE-2010-5330](https://www.precursorintelligence.com/what-is/cve-2010-5330): Ubiquiti AirOS Command Injection Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 39%, known exploited since 15 April 2022. ## Which UI flaws are most likely to be used? Ranked by the latest exploit-likelihood forecast (the chance each flaw is used in an attack in the next 30 days): - [CVE-2015-9266](https://www.precursorintelligence.com/what-is/cve-2015-9266): 74%, Critical (CVSS 9.8) - [CVE-2010-5330](https://www.precursorintelligence.com/what-is/cve-2010-5330): 39%, Critical (CVSS 9.8), known exploited - [CVE-2013-1606](https://www.precursorintelligence.com/what-is/cve-2013-1606): 23%, High (CVSS 7.5) - [CVE-2017-0938](https://www.precursorintelligence.com/what-is/cve-2017-0938): 21%, High (CVSS 7.5) - [CVE-2020-12695](https://www.precursorintelligence.com/what-is/cve-2020-12695): 15%, High (CVSS 7.5) - [CVE-2023-2375](https://www.precursorintelligence.com/what-is/cve-2023-2375): 9.3%, High (CVSS 8.8) - [CVE-2023-2377](https://www.precursorintelligence.com/what-is/cve-2023-2377): 7.6%, High (CVSS 8.8) - [CVE-2023-2373](https://www.precursorintelligence.com/what-is/cve-2023-2373): 7.6%, High (CVSS 8.8) - [CVE-2023-2376](https://www.precursorintelligence.com/what-is/cve-2023-2376): 7.6%, High (CVSS 8.8) - [CVE-2023-2378](https://www.precursorintelligence.com/what-is/cve-2023-2378): 7.6%, High (CVSS 8.8) ## All UI products we track 66 products with at least one tracked version, most vulnerabilities first: - [Er-X Firmware](https://www.precursorintelligence.com/product/ui/er-x_firmware): 8 vulnerabilities, 5 versions - [Er-X-Sfp Firmware](https://www.precursorintelligence.com/product/ui/er-x-sfp_firmware): 8 vulnerabilities, 5 versions - [Unifi Video](https://www.precursorintelligence.com/product/ui/unifi_video): 7 vulnerabilities, 31 versions - [Unifi Controller](https://www.precursorintelligence.com/product/ui/unifi_controller): 6 vulnerabilities, 9 versions - [Edgeswitch Firmware](https://www.precursorintelligence.com/product/ui/edgeswitch_firmware): 5 vulnerabilities, 4 versions - [Unifi Protect](https://www.precursorintelligence.com/product/ui/unifi_protect): 5 vulnerabilities, 3 versions - [Airos](https://www.precursorintelligence.com/product/ui/airos): 5 vulnerabilities, 41 versions - [Desktop](https://www.precursorintelligence.com/product/ui/desktop): 4 vulnerabilities, 4 versions - [Unifi Network Application](https://www.precursorintelligence.com/product/ui/unifi_network_application): 4 vulnerabilities, 49 versions - [Edgemax Edgerouter Firmware](https://www.precursorintelligence.com/product/ui/edgemax_edgerouter_firmware): 4 vulnerabilities, 1 version - [Unifi Switch Firmware](https://www.precursorintelligence.com/product/ui/unifi_switch_firmware): 3 vulnerabilities, 12 versions - [Edgerouter X Firmware](https://www.precursorintelligence.com/product/ui/edgerouter_x_firmware): 3 vulnerabilities, 1 version - [Edgeswitch X](https://www.precursorintelligence.com/product/ui/edgeswitch_x): 3 vulnerabilities, 9 versions - [Airmax Ac Firmware](https://www.precursorintelligence.com/product/ui/airmax_ac_firmware): 2 vulnerabilities, 1 version - [Camera G3 Flex Firmware](https://www.precursorintelligence.com/product/ui/camera_g3_flex_firmware): 2 vulnerabilities, 1 version - [Cloud Key Gen2](https://www.precursorintelligence.com/product/ui/cloud_key_gen2): 2 vulnerabilities, 1 version - [Cloud Key Gen2 Plus](https://www.precursorintelligence.com/product/ui/cloud_key_gen2_plus): 2 vulnerabilities, 1 version - [Edgemax Firmware](https://www.precursorintelligence.com/product/ui/edgemax_firmware): 2 vulnerabilities, 17 versions - [Edgeos](https://www.precursorintelligence.com/product/ui/edgeos): 2 vulnerabilities, 2 versions - [Edgeswitch](https://www.precursorintelligence.com/product/ui/edgeswitch): 2 vulnerabilities, 2 versions - [Er-12 Firmware](https://www.precursorintelligence.com/product/ui/er-12_firmware): 2 vulnerabilities, 5 versions - [Er-4 Firmware](https://www.precursorintelligence.com/product/ui/er-4_firmware): 2 vulnerabilities, 5 versions - [Er-6p Firmware](https://www.precursorintelligence.com/product/ui/er-6p_firmware): 2 vulnerabilities, 5 versions - [Er-8-Xg Firmware](https://www.precursorintelligence.com/product/ui/er-8-xg_firmware): 2 vulnerabilities, 5 versions - [Unifi Protect Firmware](https://www.precursorintelligence.com/product/ui/unifi_protect_firmware): 2 vulnerabilities, 5 versions - [Unifi Uap Firmware](https://www.precursorintelligence.com/product/ui/unifi_uap_firmware): 2 vulnerabilities, 39 versions - [Aircube Firmware](https://www.precursorintelligence.com/product/ui/aircube_firmware): 1 vulnerability, 2 versions - [Aircam Firmware](https://www.precursorintelligence.com/product/ui/aircam_firmware): 1 vulnerability, 1 version - [Airvision Firmware](https://www.precursorintelligence.com/product/ui/airvision_firmware): 1 vulnerability, 2 versions - [Airvision Controller](https://www.precursorintelligence.com/product/ui/airvision_controller): 1 vulnerability, 1 version - [Airmax M Xw Firmware](https://www.precursorintelligence.com/product/ui/airmax_m_xw_firmware): 1 vulnerability, 1 version - [Mfi Controller](https://www.precursorintelligence.com/product/ui/mfi_controller): 1 vulnerability, 1 version - [Airmax M Xm Firmware](https://www.precursorintelligence.com/product/ui/airmax_m_xm_firmware): 1 vulnerability, 1 version - [Airmax M Ti Firmware](https://www.precursorintelligence.com/product/ui/airmax_m_ti_firmware): 1 vulnerability, 1 version - [Airgateway Firmware](https://www.precursorintelligence.com/product/ui/airgateway_firmware): 1 vulnerability, 1 version - [Airfiber Af24hd Firmware](https://www.precursorintelligence.com/product/ui/airfiber_af24hd_firmware): 1 vulnerability, 1 version - [Airfiber Af24 Firmware](https://www.precursorintelligence.com/product/ui/airfiber_af24_firmware): 1 vulnerability, 1 version - [Ua Lite Firmware](https://www.precursorintelligence.com/product/ui/ua_lite_firmware): 1 vulnerability, 4 versions - [Unifi Video Controller](https://www.precursorintelligence.com/product/ui/unifi_video_controller): 1 vulnerability, 13 versions - [Ucrm](https://www.precursorintelligence.com/product/ui/ucrm): 1 vulnerability, 98 versions - [Unifi Cloud Key Gen2 Firmware](https://www.precursorintelligence.com/product/ui/unifi_cloud_key_gen2_firmware): 1 vulnerability, 11 versions - [Unifi Cloud Key Gen2 Plus Firmware](https://www.precursorintelligence.com/product/ui/unifi_cloud_key_gen2_plus_firmware): 1 vulnerability, 11 versions - [Unifi Controller Firmware](https://www.precursorintelligence.com/product/ui/unifi_controller_firmware): 1 vulnerability, 1 version - [Af5x Firmware](https://www.precursorintelligence.com/product/ui/af5x_firmware): 1 vulnerability, 1 version - [Unifi Dream Machine Pro Firmware](https://www.precursorintelligence.com/product/ui/unifi_dream_machine_pro_firmware): 1 vulnerability, 12 versions - [Unifi Meshing Access Point Firmware](https://www.precursorintelligence.com/product/ui/unifi_meshing_access_point_firmware): 1 vulnerability, 1 version - [Unifi Network Controller](https://www.precursorintelligence.com/product/ui/unifi_network_controller): 1 vulnerability, 30 versions - [Unifi OS](https://www.precursorintelligence.com/product/ui/unifi_os): 1 vulnerability, 1 version - [Af5 Firmware](https://www.precursorintelligence.com/product/ui/af5_firmware): 1 vulnerability, 1 version - [Erpro-8 Firmware](https://www.precursorintelligence.com/product/ui/erpro-8_firmware): 1 vulnerability, 4 versions - [Erpoe-5 Firmware](https://www.precursorintelligence.com/product/ui/erpoe-5_firmware): 1 vulnerability, 4 versions - [Erlite-3 Firmware](https://www.precursorintelligence.com/product/ui/erlite-3_firmware): 1 vulnerability, 4 versions - [Er-8 Firmware](https://www.precursorintelligence.com/product/ui/er-8_firmware): 1 vulnerability, 4 versions - [Er-12p Firmware](https://www.precursorintelligence.com/product/ui/er-12p_firmware): 1 vulnerability, 1 version - [Er-10x Firmware](https://www.precursorintelligence.com/product/ui/er-10x_firmware): 1 vulnerability, 1 version - [Ep-R8 Firmware](https://www.precursorintelligence.com/product/ui/ep-r8_firmware): 1 vulnerability, 4 versions - [Ep-R6 Firmware](https://www.precursorintelligence.com/product/ui/ep-r6_firmware): 1 vulnerability, 4 versions - [Edgemax Edgepower 54v Firmware](https://www.precursorintelligence.com/product/ui/edgemax_edgepower_54v_firmware): 1 vulnerability, 1 version - [Edgemax Edgepower 24v Firmware](https://www.precursorintelligence.com/product/ui/edgemax_edgepower_24v_firmware): 1 vulnerability, 1 version - [Unifi Protect G3 Flex Camera Firmware](https://www.precursorintelligence.com/product/ui/unifi_protect_g3_flex_camera_firmware): 0 vulnerabilities, 1 version - [Unifi AP Ac Lite Firmware](https://www.precursorintelligence.com/product/ui/unifi_ap_ac_lite_firmware): 0 vulnerabilities, 1 version - [Unifi Dream Machine Firmware](https://www.precursorintelligence.com/product/ui/unifi_dream_machine_firmware): 0 vulnerabilities, 6 versions - [Airos 4 Xs5](https://www.precursorintelligence.com/product/ui/airos_4_xs5): 0 vulnerabilities, 1 version - [Airos 4 Xs2](https://www.precursorintelligence.com/product/ui/airos_4_xs2): 0 vulnerabilities, 1 version - [Unifi](https://www.precursorintelligence.com/product/ui/unifi): 0 vulnerabilities, 2 versions - [Edgeswitch Xp Firmware](https://www.precursorintelligence.com/product/ui/edgeswitch_xp_firmware): 0 vulnerabilities, 1 version ## Questions ### How many vulnerabilities does UI have? Our catalogue lists 81 published vulnerabilities across 257 products and 501 versions from UI. The most recent UI flaw added to the known-exploited list is CVE-2010-5330, on 15 April 2022. ### Which UI vulnerabilities are being exploited? 1 UI vulnerability is on the list of flaws known to be exploited. The most recently added is CVE-2010-5330. The full list is on this page. ### Which UI product has the most vulnerabilities? Er-X, with 9 published vulnerabilities. Its own page lists the ones known to be exploited. ### How do I get alerts for new UI vulnerabilities? Create a Precursor Intelligence account and track the UI products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook. ## Running UI? Precursor Intelligence keeps checking for you: - **Tell us what you run.** Pick your software from a list, or let us work it out from your website. - **We match it to every flaw.** Over 400,000 published flaws, checked against your list. - **Ranked by real-world risk.** Every flaw gets a 0 to 100 risk score, kept up to date, led by evidence criminals are using it. - **Told as soon as we know.** An alert by email, in the app or by webhook to your own tools. Start free (no card, nothing to install): https://www.precursorintelligence.com/register Book a demo: https://www.precursorintelligence.com/contact