# What is CVE-2020-12695? > CVE-2020-12695 is a high-severity flaw (CVSS 7.5) in Unifi Controller from UI, published on 8 June 2020. It is not on the list of flaws known to be exploited today. The latest forecast puts its chance of use in the next 30 days at 15%. If you run an affected version, plan in the vendor’s fix. Canonical page: https://www.precursorintelligence.com/what-is/cve-2020-12695 ## At a glance - **Verdict:** Fix this soon. Not confirmed as exploited yet, but serious or likely enough that it should not wait for a quiet month. - **Precursor Intelligence risk score:** 49 out of 100 (Medium); action: Plan remediation. Kept up to date as the evidence changes. - **Severity:** High (CVSS 7.5 out of 10) - **Known to be exploited:** No, not on the list of flaws known to be exploited today - **Chance of use in the next 30 days:** 15% (latest exploit-likelihood forecast) - **Published:** 8 June 2020 - **Record last updated:** 8 April 2024 - **Main product:** Unifi Controller from UI - **Affected products:** 217 ## What is CVE-2020-12695? In plain terms It can be attacked from anywhere on the internet without logging in, and nobody has to click anything. If it works, the attacker can take it offline. ### The official description The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request with a delivery URL on a different network segment than the fully qualified event-subscription URL, aka the CallStranger issue. ### What kind of flaw is it? - CWE-276: Incorrect Default Permissions ### How an attack on it works - Where an attacker can be: Anywhere on the internet - How hard it is to pull off: Hard: conditions must line up - Login needed first: No login needed - Does someone have to click: No, nobody has to do anything - What an attacker gets: Can take it offline Severity vector: `CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:H` ## Is CVE-2020-12695 being exploited? Not that we know of It is not on the list of flaws known to be exploited today. The latest forecast puts the chance of it being used in the next 30 days at 15%. That can change at any time, which is why we keep watching. Exploit likelihood over the last 7 days: 15%, 15%, 15%, 15%, 15%, 15%, 15%. ### Timeline - 8 June 2020: Published - 8 April 2024: Record last updated - 16 June 2026: Exploit likelihood jumped ### How Precursor Intelligence ranks it CVE-2020-12695 scores **49 out of 100 (Medium)**, with the action "Plan remediation". Every published flaw gets a risk score from 0 to 100, kept up to date as the evidence changes. Four things go into the score, from the one that counts most to the ones that count less: - Evidence it is being exploited: biggest factor - How severe it is: strong factor - How widely exposed it is: smaller factor - Threat activity around it: smaller factor 85 and above is Critical. Anything confirmed as exploited is always marked for an emergency patch, whatever its score. When this flaw matches software you track, it lands in your list with its score and the reasons behind it. ## Who is affected by CVE-2020-12695? The published record lists 217 products. Versions are as published: "before 2.0.0" means every version up to, but not including, 2.0.0. - [Unifi Controller](https://www.precursorintelligence.com/product/ui/unifi_controller) by [UI](https://www.precursorintelligence.com/vendors/ui) (Application): version not specified - [Debian Linux](https://www.precursorintelligence.com/product/debian/debian_linux) by [Debian](https://www.precursorintelligence.com/vendors/debian) (Operating system): 9.0, 10.0 - [Fedora](https://www.precursorintelligence.com/product/fedoraproject/fedora) by [Fedoraproject](https://www.precursorintelligence.com/vendors/fedoraproject) (Operating system): 31, 32 - [5020 Z4a69a](https://www.precursorintelligence.com/product/hp/5020_z4a69a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [5030 M2u92b](https://www.precursorintelligence.com/product/hp/5030_m2u92b) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [5030 Z4a70a](https://www.precursorintelligence.com/product/hp/5030_z4a70a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [5034 Z4a74a](https://www.precursorintelligence.com/product/hp/5034_z4a74a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [5660 F8b04a](https://www.precursorintelligence.com/product/hp/5660_f8b04a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Adsl](https://www.precursorintelligence.com/product/broadcom/adsl) by [Broadcom](https://www.precursorintelligence.com/vendors/broadcom) (Hardware): version not specified - [Amg1202-T10b](https://www.precursorintelligence.com/product/zyxel/amg1202-t10b) by [Zyxel](https://www.precursorintelligence.com/vendors/zyxel) (Hardware): version not specified - [Archer C50](https://www.precursorintelligence.com/product/tp-link/archer_c50) by [TP-Link](https://www.precursorintelligence.com/vendors/tp-link) (Hardware): version not specified - [B1165nfw](https://www.precursorintelligence.com/product/dell/b1165nfw) by [Dell](https://www.precursorintelligence.com/vendors/dell) (Hardware): version not specified - [Deskjet Ink Advantage 3456 A9t84c](https://www.precursorintelligence.com/product/hp/deskjet_ink_advantage_3456_a9t84c) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Deskjet Ink Advantage 3545 A9t81a](https://www.precursorintelligence.com/product/hp/deskjet_ink_advantage_3545_a9t81a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Deskjet Ink Advantage 3545 A9t81c](https://www.precursorintelligence.com/product/hp/deskjet_ink_advantage_3545_a9t81c) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Deskjet Ink Advantage 3545 A9t83b](https://www.precursorintelligence.com/product/hp/deskjet_ink_advantage_3545_a9t83b) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Deskjet Ink Advantage 3546 A9t82a](https://www.precursorintelligence.com/product/hp/deskjet_ink_advantage_3546_a9t82a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Deskjet Ink Advantage 3548 A9t81b](https://www.precursorintelligence.com/product/hp/deskjet_ink_advantage_3548_a9t81b) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Deskjet Ink Advantage 4515](https://www.precursorintelligence.com/product/hp/deskjet_ink_advantage_4515) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Deskjet Ink Advantage 4518](https://www.precursorintelligence.com/product/hp/deskjet_ink_advantage_4518) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Deskjet Ink Advantage 4535 F0v64a](https://www.precursorintelligence.com/product/hp/deskjet_ink_advantage_4535_f0v64a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Deskjet Ink Advantage 4535 F0v64b](https://www.precursorintelligence.com/product/hp/deskjet_ink_advantage_4535_f0v64b) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Deskjet Ink Advantage 4535 F0v64c](https://www.precursorintelligence.com/product/hp/deskjet_ink_advantage_4535_f0v64c) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Deskjet Ink Advantage 4536 F0v65a](https://www.precursorintelligence.com/product/hp/deskjet_ink_advantage_4536_f0v65a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Deskjet Ink Advantage 4538 F0v66b](https://www.precursorintelligence.com/product/hp/deskjet_ink_advantage_4538_f0v66b) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Deskjet Ink Advantage 4675 F1h97a](https://www.precursorintelligence.com/product/hp/deskjet_ink_advantage_4675_f1h97a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Deskjet Ink Advantage 4675 F1h97b](https://www.precursorintelligence.com/product/hp/deskjet_ink_advantage_4675_f1h97b) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Deskjet Ink Advantage 4675 F1h97c](https://www.precursorintelligence.com/product/hp/deskjet_ink_advantage_4675_f1h97c) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Deskjet Ink Advantage 4676 F1h98a](https://www.precursorintelligence.com/product/hp/deskjet_ink_advantage_4676_f1h98a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Deskjet Ink Advantage 4678 F1h99b](https://www.precursorintelligence.com/product/hp/deskjet_ink_advantage_4678_f1h99b) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Deskjet Ink Advantage 5575 G0v48b](https://www.precursorintelligence.com/product/hp/deskjet_ink_advantage_5575_g0v48b) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Deskjet Ink Advantage 5575 G0v48c](https://www.precursorintelligence.com/product/hp/deskjet_ink_advantage_5575_g0v48c) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Dvg-N5412sp](https://www.precursorintelligence.com/product/dlink/dvg-n5412sp) by [Dlink](https://www.precursorintelligence.com/vendors/dlink) (Hardware): version not specified - [Envy 100 Cn517a](https://www.precursorintelligence.com/product/hp/envy_100_cn517a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 100 Cn517b](https://www.precursorintelligence.com/product/hp/envy_100_cn517b) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 100 Cn517c](https://www.precursorintelligence.com/product/hp/envy_100_cn517c) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 100 Cn518a](https://www.precursorintelligence.com/product/hp/envy_100_cn518a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 100 Cn519a](https://www.precursorintelligence.com/product/hp/envy_100_cn519a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 100 Cn519b](https://www.precursorintelligence.com/product/hp/envy_100_cn519b) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 110 Cq809a](https://www.precursorintelligence.com/product/hp/envy_110_cq809a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 110 Cq809b](https://www.precursorintelligence.com/product/hp/envy_110_cq809b) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 110 Cq809c](https://www.precursorintelligence.com/product/hp/envy_110_cq809c) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 110 Cq809d](https://www.precursorintelligence.com/product/hp/envy_110_cq809d) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 110 Cq812c](https://www.precursorintelligence.com/product/hp/envy_110_cq812c) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 111 Cq810a](https://www.precursorintelligence.com/product/hp/envy_111_cq810a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 114 Cq811a](https://www.precursorintelligence.com/product/hp/envy_114_cq811a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 114 Cq811b](https://www.precursorintelligence.com/product/hp/envy_114_cq811b) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 114 Cq812a](https://www.precursorintelligence.com/product/hp/envy_114_cq812a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 120 Cz022a](https://www.precursorintelligence.com/product/hp/envy_120_cz022a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 120 Cz022b](https://www.precursorintelligence.com/product/hp/envy_120_cz022b) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 120 Cz022c](https://www.precursorintelligence.com/product/hp/envy_120_cz022c) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 4500 A9t80a](https://www.precursorintelligence.com/product/hp/envy_4500_a9t80a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 4500 A9t80b](https://www.precursorintelligence.com/product/hp/envy_4500_a9t80b) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 4500 A9t89a](https://www.precursorintelligence.com/product/hp/envy_4500_a9t89a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 4500 D3p93a](https://www.precursorintelligence.com/product/hp/envy_4500_d3p93a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 4501 C8d05a](https://www.precursorintelligence.com/product/hp/envy_4501_c8d05a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 4502 A9t85a](https://www.precursorintelligence.com/product/hp/envy_4502_a9t85a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 4502 A9t87b](https://www.precursorintelligence.com/product/hp/envy_4502_a9t87b) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 4503 E6g71b](https://www.precursorintelligence.com/product/hp/envy_4503_e6g71b) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 4504 A9t88b](https://www.precursorintelligence.com/product/hp/envy_4504_a9t88b) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 4504 C8d04a](https://www.precursorintelligence.com/product/hp/envy_4504_c8d04a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 4505 A9t86a](https://www.precursorintelligence.com/product/hp/envy_4505_a9t86a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 4507 E6g70b](https://www.precursorintelligence.com/product/hp/envy_4507_e6g70b) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 4508 E6g72b](https://www.precursorintelligence.com/product/hp/envy_4508_e6g72b) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 4509 D3p94a](https://www.precursorintelligence.com/product/hp/envy_4509_d3p94a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 4509 D3p94b](https://www.precursorintelligence.com/product/hp/envy_4509_d3p94b) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 4511 K9h50a](https://www.precursorintelligence.com/product/hp/envy_4511_k9h50a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 4512 K9h49a](https://www.precursorintelligence.com/product/hp/envy_4512_k9h49a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 4513 K9h51a](https://www.precursorintelligence.com/product/hp/envy_4513_k9h51a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 4516 K9h52a](https://www.precursorintelligence.com/product/hp/envy_4516_k9h52a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 4520 E6g67a](https://www.precursorintelligence.com/product/hp/envy_4520_e6g67a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 4520 E6g67b](https://www.precursorintelligence.com/product/hp/envy_4520_e6g67b) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 4520 F0v63a](https://www.precursorintelligence.com/product/hp/envy_4520_f0v63a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 4520 F0v63b](https://www.precursorintelligence.com/product/hp/envy_4520_f0v63b) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 4520 F0v69a](https://www.precursorintelligence.com/product/hp/envy_4520_f0v69a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 4521 K9t10b](https://www.precursorintelligence.com/product/hp/envy_4521_k9t10b) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 4522 F0v67a](https://www.precursorintelligence.com/product/hp/envy_4522_f0v67a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 4523 J6u60b](https://www.precursorintelligence.com/product/hp/envy_4523_j6u60b) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 4524 F0v71b](https://www.precursorintelligence.com/product/hp/envy_4524_f0v71b) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 4524 F0v72b](https://www.precursorintelligence.com/product/hp/envy_4524_f0v72b) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 4524 K9t01a](https://www.precursorintelligence.com/product/hp/envy_4524_k9t01a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 4525 K9t09b](https://www.precursorintelligence.com/product/hp/envy_4525_k9t09b) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 4526 K9t05b](https://www.precursorintelligence.com/product/hp/envy_4526_k9t05b) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 4527 J6u61b](https://www.precursorintelligence.com/product/hp/envy_4527_j6u61b) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 4528 K9t08b](https://www.precursorintelligence.com/product/hp/envy_4528_k9t08b) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 5000 M2u85a](https://www.precursorintelligence.com/product/hp/envy_5000_m2u85a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 5000 M2u85b](https://www.precursorintelligence.com/product/hp/envy_5000_m2u85b) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 5000 M2u91a](https://www.precursorintelligence.com/product/hp/envy_5000_m2u91a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): all versions - [Envy 5000 M2u94b](https://www.precursorintelligence.com/product/hp/envy_5000_m2u94b) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 5000 Z4a54a](https://www.precursorintelligence.com/product/hp/envy_5000_z4a54a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 5000 Z4a74a](https://www.precursorintelligence.com/product/hp/envy_5000_z4a74a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 5020 M2u91b](https://www.precursorintelligence.com/product/hp/envy_5020_m2u91b) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 5530](https://www.precursorintelligence.com/product/hp/envy_5530) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 5531](https://www.precursorintelligence.com/product/hp/envy_5531) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 5532](https://www.precursorintelligence.com/product/hp/envy_5532) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 5534](https://www.precursorintelligence.com/product/hp/envy_5534) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 5535](https://www.precursorintelligence.com/product/hp/envy_5535) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 5536](https://www.precursorintelligence.com/product/hp/envy_5536) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 5539](https://www.precursorintelligence.com/product/hp/envy_5539) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 5540 F2e72a](https://www.precursorintelligence.com/product/hp/envy_5540_f2e72a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 5540 G0v47a](https://www.precursorintelligence.com/product/hp/envy_5540_g0v47a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 5540 G0v51a](https://www.precursorintelligence.com/product/hp/envy_5540_g0v51a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 5540 G0v52a](https://www.precursorintelligence.com/product/hp/envy_5540_g0v52a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 5540 G0v53a](https://www.precursorintelligence.com/product/hp/envy_5540_g0v53a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 5540 K7c85a](https://www.precursorintelligence.com/product/hp/envy_5540_k7c85a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 5541 K7g89a](https://www.precursorintelligence.com/product/hp/envy_5541_k7g89a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 5542 K7c88a](https://www.precursorintelligence.com/product/hp/envy_5542_k7c88a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 5543 N9u88a](https://www.precursorintelligence.com/product/hp/envy_5543_n9u88a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 5544 K7c89a](https://www.precursorintelligence.com/product/hp/envy_5544_k7c89a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 5544 K7c93a](https://www.precursorintelligence.com/product/hp/envy_5544_k7c93a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 5545 G0v50a](https://www.precursorintelligence.com/product/hp/envy_5545_g0v50a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 5546 K7c90a](https://www.precursorintelligence.com/product/hp/envy_5546_k7c90a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 5547 J6u64a](https://www.precursorintelligence.com/product/hp/envy_5547_j6u64a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 5548 K7g87a](https://www.precursorintelligence.com/product/hp/envy_5548_k7g87a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 5640 B9s56a](https://www.precursorintelligence.com/product/hp/envy_5640_b9s56a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 5640 B9s58a](https://www.precursorintelligence.com/product/hp/envy_5640_b9s58a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 5642 B9s64a](https://www.precursorintelligence.com/product/hp/envy_5642_b9s64a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 5643 B9s63a](https://www.precursorintelligence.com/product/hp/envy_5643_b9s63a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 5644 B9s65a](https://www.precursorintelligence.com/product/hp/envy_5644_b9s65a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 5646 F8b05a](https://www.precursorintelligence.com/product/hp/envy_5646_f8b05a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 5664 F8b08a](https://www.precursorintelligence.com/product/hp/envy_5664_f8b08a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 5665 F8b06a](https://www.precursorintelligence.com/product/hp/envy_5665_f8b06a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 6020 5se16b](https://www.precursorintelligence.com/product/hp/envy_6020_5se16b) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 6020 5se17a](https://www.precursorintelligence.com/product/hp/envy_6020_5se17a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 6020 6wd35a](https://www.precursorintelligence.com/product/hp/envy_6020_6wd35a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 6020 7cz37a](https://www.precursorintelligence.com/product/hp/envy_6020_7cz37a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 6052 5se18a](https://www.precursorintelligence.com/product/hp/envy_6052_5se18a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 6055 5se16a](https://www.precursorintelligence.com/product/hp/envy_6055_5se16a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 6540 B9s59a](https://www.precursorintelligence.com/product/hp/envy_6540_b9s59a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 7640](https://www.precursorintelligence.com/product/hp/envy_7640) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 7644 E4w46a](https://www.precursorintelligence.com/product/hp/envy_7644_e4w46a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy 7645 E4w44a](https://www.precursorintelligence.com/product/hp/envy_7645_e4w44a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy Photo 6200 K7g18a](https://www.precursorintelligence.com/product/hp/envy_photo_6200_k7g18a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy Photo 6200 K7g26b](https://www.precursorintelligence.com/product/hp/envy_photo_6200_k7g26b) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy Photo 6200 K7s21b](https://www.precursorintelligence.com/product/hp/envy_photo_6200_k7s21b) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy Photo 6200 Y0k13d](https://www.precursorintelligence.com/product/hp/envy_photo_6200_y0k13d_) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy Photo 6200 Y0k15a](https://www.precursorintelligence.com/product/hp/envy_photo_6200_y0k15a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy Photo 6220 K7g20d](https://www.precursorintelligence.com/product/hp/envy_photo_6220_k7g20d) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy Photo 6220 K7g21b](https://www.precursorintelligence.com/product/hp/envy_photo_6220_k7g21b) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy Photo 6222 Y0k13d](https://www.precursorintelligence.com/product/hp/envy_photo_6222_y0k13d) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy Photo 6222 Y0k14d](https://www.precursorintelligence.com/product/hp/envy_photo_6222_y0k14d) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy Photo 6230 K7g25b](https://www.precursorintelligence.com/product/hp/envy_photo_6230_k7g25b) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy Photo 6232 K7g26b](https://www.precursorintelligence.com/product/hp/envy_photo_6232_k7g26b) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy Photo 6234 K7s21b](https://www.precursorintelligence.com/product/hp/envy_photo_6234_k7s21b) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy Photo 6252 K7g22a](https://www.precursorintelligence.com/product/hp/envy_photo_6252_k7g22a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy Photo 7100 3xd89a](https://www.precursorintelligence.com/product/hp/envy_photo_7100_3xd89a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy Photo 7100 K7g93a](https://www.precursorintelligence.com/product/hp/envy_photo_7100_k7g93a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy Photo 7100 K7g99a](https://www.precursorintelligence.com/product/hp/envy_photo_7100_k7g99a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy Photo 7100 Z3m37a](https://www.precursorintelligence.com/product/hp/envy_photo_7100_z3m37a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy Photo 7100 Z3m52a](https://www.precursorintelligence.com/product/hp/envy_photo_7100_z3m52a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy Photo 7120 Z3m41d](https://www.precursorintelligence.com/product/hp/envy_photo_7120_z3m41d) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy Photo 7155 Z3m52a](https://www.precursorintelligence.com/product/hp/envy_photo_7155_z3m52a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy Photo 7164 K7g99a](https://www.precursorintelligence.com/product/hp/envy_photo_7164_k7g99a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy Photo 7800 K7r96a](https://www.precursorintelligence.com/product/hp/envy_photo_7800_k7r96a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy Photo 7800 K7s00a](https://www.precursorintelligence.com/product/hp/envy_photo_7800_k7s00a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy Photo 7800 K7s10d](https://www.precursorintelligence.com/product/hp/envy_photo_7800_k7s10d) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy Photo 7800 Y0g42d](https://www.precursorintelligence.com/product/hp/envy_photo_7800_y0g42d) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy Photo 7800 Y0g52b](https://www.precursorintelligence.com/product/hp/envy_photo_7800_y0g52b) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy Photo 7822 Y0g42d](https://www.precursorintelligence.com/product/hp/envy_photo_7822_y0g42d) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy Photo 7822 Y0g43d](https://www.precursorintelligence.com/product/hp/envy_photo_7822_y0g43d) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy Photo 7830 Y0g50b](https://www.precursorintelligence.com/product/hp/envy_photo_7830_y0g50b) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy Pro 6420 5se45b](https://www.precursorintelligence.com/product/hp/envy_pro_6420_5se45b) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy Pro 6420 5se46a](https://www.precursorintelligence.com/product/hp/envy_pro_6420_5se46a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy Pro 6420 6wd14a](https://www.precursorintelligence.com/product/hp/envy_pro_6420_6wd14a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy Pro 6420 6wd16a](https://www.precursorintelligence.com/product/hp/envy_pro_6420_6wd16a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy Pro 6452 5se47a](https://www.precursorintelligence.com/product/hp/envy_pro_6452_5se47a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Envy Pro 6455 5se45a](https://www.precursorintelligence.com/product/hp/envy_pro_6455_5se45a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Ep-101](https://www.precursorintelligence.com/product/epson/ep-101) by [Epson](https://www.precursorintelligence.com/vendors/epson) (Hardware): version not specified - [Ew-M970a3t](https://www.precursorintelligence.com/product/epson/ew-m970a3t) by [Epson](https://www.precursorintelligence.com/vendors/epson) (Hardware): version not specified - [Hg255s](https://www.precursorintelligence.com/product/huawei/hg255s) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Hardware): version not specified - [Hg532e](https://www.precursorintelligence.com/product/huawei/hg532e) by [Huawei](https://www.precursorintelligence.com/vendors/huawei) (Hardware): version not specified - [Hostapd](https://www.precursorintelligence.com/product/w1.fi/hostapd) by [W1.fi](https://www.precursorintelligence.com/vendors/w1.fi) (Application): before 2.0.0 - [M571t](https://www.precursorintelligence.com/product/epson/m571t) by [Epson](https://www.precursorintelligence.com/vendors/epson) (Hardware): version not specified - [Officejet 4650 E6g87a](https://www.precursorintelligence.com/product/hp/officejet_4650_e6g87a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Officejet 4650 F1h96a](https://www.precursorintelligence.com/product/hp/officejet_4650_f1h96a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Officejet 4650 F1h96b](https://www.precursorintelligence.com/product/hp/officejet_4650_f1h96b) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Officejet 4652 F1j02a](https://www.precursorintelligence.com/product/hp/officejet_4652_f1j02a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Officejet 4652 F1j05b](https://www.precursorintelligence.com/product/hp/officejet_4652_f1j05b) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Officejet 4652 K9v84b](https://www.precursorintelligence.com/product/hp/officejet_4652_k9v84b) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Officejet 4654 F1j06b](https://www.precursorintelligence.com/product/hp/officejet_4654_f1j06b) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Officejet 4654 F1j07b](https://www.precursorintelligence.com/product/hp/officejet_4654_f1j07b) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Officejet 4655 F1j00a](https://www.precursorintelligence.com/product/hp/officejet_4655_f1j00a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Officejet 4655 K9v79a](https://www.precursorintelligence.com/product/hp/officejet_4655_k9v79a) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Officejet 4655 K9v82b](https://www.precursorintelligence.com/product/hp/officejet_4655_k9v82b) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Officejet 4656 K9v81b](https://www.precursorintelligence.com/product/hp/officejet_4656_k9v81b) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Officejet 4657 V6d29b](https://www.precursorintelligence.com/product/hp/officejet_4657_v6d29b) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Officejet 4658 V6d30b](https://www.precursorintelligence.com/product/hp/officejet_4658_v6d30b) by [HP](https://www.precursorintelligence.com/vendors/hp) (Hardware): version not specified - [Rt-N11](https://www.precursorintelligence.com/product/asus/rt-n11) by [Asus](https://www.precursorintelligence.com/vendors/asus) (Hardware): version not specified - [Selphy Cp1200](https://www.precursorintelligence.com/product/canon/selphy_cp1200) by [Canon](https://www.precursorintelligence.com/vendors/canon) (Hardware): version not specified - [Ubuntu Linux](https://www.precursorintelligence.com/product/canonical/ubuntu_linux) by [Canonical](https://www.precursorintelligence.com/vendors/canonical) (Operating system): 20.04 - [Vmg8324-B10a](https://www.precursorintelligence.com/product/zyxel/vmg8324-b10a) by [Zyxel](https://www.precursorintelligence.com/vendors/zyxel) (Hardware): version not specified - [Wap131](https://www.precursorintelligence.com/product/cisco/wap131) by [Cisco](https://www.precursorintelligence.com/vendors/cisco) (Hardware): version not specified - [Wap150](https://www.precursorintelligence.com/product/cisco/wap150) by [Cisco](https://www.precursorintelligence.com/vendors/cisco) (Hardware): version not specified - [Wap351](https://www.precursorintelligence.com/product/cisco/wap351) by [Cisco](https://www.precursorintelligence.com/vendors/cisco) (Hardware): version not specified - [Windows 10](https://www.precursorintelligence.com/product/microsoft/windows_10) by [Microsoft](https://www.precursorintelligence.com/vendors/microsoft) (Operating system): version not specified - [Wnhde111](https://www.precursorintelligence.com/product/netgear/wnhde111) by [Netgear](https://www.precursorintelligence.com/vendors/netgear) (Hardware): version not specified - [Wr8165n](https://www.precursorintelligence.com/product/nec/wr8165n) by [Nec](https://www.precursorintelligence.com/vendors/nec) (Hardware): version not specified - [Xbox One](https://www.precursorintelligence.com/product/microsoft/xbox_one) by [Microsoft](https://www.precursorintelligence.com/vendors/microsoft) (Operating system): 10.0.19041.2494 - [Xp-100](https://www.precursorintelligence.com/product/epson/xp-100) by [Epson](https://www.precursorintelligence.com/vendors/epson) (Hardware): version not specified - [Xp-2101](https://www.precursorintelligence.com/product/epson/xp-2101) by [Epson](https://www.precursorintelligence.com/vendors/epson) (Hardware): version not specified - [Xp-2105](https://www.precursorintelligence.com/product/epson/xp-2105) by [Epson](https://www.precursorintelligence.com/vendors/epson) (Hardware): version not specified - [Xp-241](https://www.precursorintelligence.com/product/epson/xp-241) by [Epson](https://www.precursorintelligence.com/vendors/epson) (Hardware): version not specified - [Xp-320](https://www.precursorintelligence.com/product/epson/xp-320) by [Epson](https://www.precursorintelligence.com/vendors/epson) (Hardware): version not specified - [Xp-330](https://www.precursorintelligence.com/product/epson/xp-330) by [Epson](https://www.precursorintelligence.com/vendors/epson) (Hardware): version not specified - [Xp-340](https://www.precursorintelligence.com/product/epson/xp-340) by [Epson](https://www.precursorintelligence.com/vendors/epson) (Hardware): version not specified - [Xp-4100](https://www.precursorintelligence.com/product/epson/xp-4100) by [Epson](https://www.precursorintelligence.com/vendors/epson) (Hardware): version not specified - [Xp-4105](https://www.precursorintelligence.com/product/epson/xp-4105) by [Epson](https://www.precursorintelligence.com/vendors/epson) (Hardware): version not specified - [Xp-440](https://www.precursorintelligence.com/product/epson/xp-440) by [Epson](https://www.precursorintelligence.com/vendors/epson) (Hardware): version not specified - [Xp-620](https://www.precursorintelligence.com/product/epson/xp-620) by [Epson](https://www.precursorintelligence.com/vendors/epson) (Hardware): version not specified - [Xp-630](https://www.precursorintelligence.com/product/epson/xp-630) by [Epson](https://www.precursorintelligence.com/vendors/epson) (Hardware): version not specified - [Xp-702](https://www.precursorintelligence.com/product/epson/xp-702) by [Epson](https://www.precursorintelligence.com/vendors/epson) (Hardware): version not specified - [Xp-8500](https://www.precursorintelligence.com/product/epson/xp-8500) by [Epson](https://www.precursorintelligence.com/vendors/epson) (Hardware): version not specified - [Xp-8600](https://www.precursorintelligence.com/product/epson/xp-8600) by [Epson](https://www.precursorintelligence.com/vendors/epson) (Hardware): version not specified - [Xp-960](https://www.precursorintelligence.com/product/epson/xp-960) by [Epson](https://www.precursorintelligence.com/vendors/epson) (Hardware): version not specified - [Xp-970](https://www.precursorintelligence.com/product/epson/xp-970) by [Epson](https://www.precursorintelligence.com/vendors/epson) (Hardware): version not specified - [Zonedirector 1200](https://www.precursorintelligence.com/product/ruckussecurity/zonedirector_1200) by [Ruckussecurity](https://www.precursorintelligence.com/vendors/ruckussecurity) (Hardware): version not specified - [Zxv10 W300](https://www.precursorintelligence.com/product/zte/zxv10_w300) by [Zte](https://www.precursorintelligence.com/vendors/zte) (Hardware): version not specified ## How do I fix CVE-2020-12695? 1. **Check whether you run it.** Compare your versions with the affected products above. Not sure what you run? Precursor Intelligence can work it out from your public website, or you can pick it from a list. 2. **Apply the vendor’s fix.** Install the latest update from the vendor. The references list where the vendor has published details. 3. **If you can’t patch today.** Follow any mitigation the vendor publishes, and limit who can reach the affected system from the internet until the update is in. 4. **Keep an eye on it.** Track the product and we tell you as soon as we spot this flaw on the list of exploited flaws, or a jump in its exploit likelihood. ### References - [packetstormsecurity.com](http://packetstormsecurity.com/files/158051/CallStranger-UPnP-Vulnerability-Checker.html) (Third-party advisory, Vulnerability database) - [openwall.com](http://www.openwall.com/lists/oss-security/2020/06/08/2) (Mailing list, Third-party advisory) - [corelight.blog](https://corelight.blog/2020/06/10/detecting-the-new-callstranger-upnp-vulnerability-with-zeek/) (Third-party advisory) - [github.com](https://github.com/corelight/callstranger-detector) (Third-party advisory) - [github.com](https://github.com/yunuscadirci/CallStranger) (Third-party advisory) - [lists.debian.org](https://lists.debian.org/debian-lts-announce/2020/08/msg00011.html) (Third-party advisory) - [lists.debian.org](https://lists.debian.org/debian-lts-announce/2020/08/msg00013.html) (Third-party advisory) - [lists.debian.org](https://lists.debian.org/debian-lts-announce/2020/12/msg00017.html) (Third-party advisory) - [lists.fedoraproject.org](https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3SHL4LOFGHJ3DIXSUIQELGVBDJ7V7LB/) (Mailing list, Third-party advisory) - [lists.fedoraproject.org](https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MZDWHKGN3LMGSUEOAAVAMOD3IUIPJVOJ/) (Mailing list, Third-party advisory) - [lists.fedoraproject.org](https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RQEYVY4D7LASH6AI4WK3IK2QBFHHF3Q2/) (Mailing list, Third-party advisory) - [usn.ubuntu.com](https://usn.ubuntu.com/4494-1/) (Third-party advisory) - [callstranger.com](https://www.callstranger.com) (Broken link) - [debian.org](https://www.debian.org/security/2020/dsa-4806) (Third-party advisory) - [debian.org](https://www.debian.org/security/2021/dsa-4898) (Third-party advisory) - [kb.cert.org](https://www.kb.cert.org/vuls/id/339275) (Third-party advisory, Government resource) - [tenable.com](https://www.tenable.com/blog/cve-2020-12695-callstranger-vulnerability-in-universal-plug-and-play-upnp-puts-billions-of) (Third-party advisory) ## Questions ### What is CVE-2020-12695? CVE-2020-12695 is a high-severity flaw in Unifi Controller from UI, published on 8 June 2020. It can be attacked from anywhere on the internet without logging in, and nobody has to click anything. If it works, the attacker can take it offline. ### How serious is CVE-2020-12695? It scores 7.5 out of 10 on the CVSS severity scale, which is high. Our risk score for CVE-2020-12695 is 49 out of 100, which is Medium. Its action is "Plan remediation". Not confirmed as exploited yet, but serious or likely enough that it should not wait for a quiet month. ### Is CVE-2020-12695 being exploited? It is not on the list of flaws known to be exploited today. The latest forecast puts the chance of it being used in the next 30 days at 15%. That can change at any time, which is why we keep watching. ### Which versions does CVE-2020-12695 affect? For Unifi Controller from UI: version not specified. The record lists 217 products in all, each with its versions, under "Who is affected" on this page. ### How do I fix CVE-2020-12695? Install the update the vendor names in its advisory. If you can't patch today, follow the vendor's mitigation and limit who can reach the affected system from the internet. ## Does CVE-2020-12695 affect you? Precursor Intelligence keeps checking for you: - **Tell us what you run.** Pick your software from a list, or let us work it out from your website. - **We match it to every flaw.** Over 400,000 published flaws, checked against your list. - **Ranked by real-world risk.** Every flaw gets a 0 to 100 risk score, kept up to date, led by evidence criminals are using it. - **Told as soon as we know.** An alert by email, in the app or by webhook to your own tools. Start free (no card, nothing to install): https://www.precursorintelligence.com/register Book a demo: https://www.precursorintelligence.com/contact