An improper access control vulnerability in Ubiquiti UniFi Play devices permits unauthenticated attackers to exfiltrate WiFi credentials, posing a significant risk to network confidentiality.

The vulnerability is an improper access control flaw (CWE-284) that allows an unauthenticated network-adjacent attacker to access sensitive WiFi credential information. The vulnerability is triggered via network access without requiring prior authentication.

The exposure of WiFi credentials provides unauthorized parties with persistent access to the internal network, facilitating potential lateral movement and further data breaches. With a CVSS score of 7.5, this high severity vulnerability represents a direct threat to the confidentiality of organizational wireless communications.

Immediate Action: Update UniFi Play PowerAmp to version 1.0.38 or later, and update UniFi Play Audio Port to version 1.1.9 or later.

Proactive Monitoring: Review network access logs for unusual traffic patterns originating from UniFi Play devices and monitor for unauthorized devices connecting to the wireless infrastructure.

Compensating Controls: Isolate affected UniFi Play devices on a restricted management VLAN to limit the scope of potential unauthorized access while awaiting patch deployment.

Public Exploit Available: No — there is no confirmed public exploit available.

Given the ease of exploitation for this vulnerability, administrators must prioritize the firmware updates for all deployed UniFi Play units. Failure to apply these patches leaves the wireless network infrastructure exposed to unauthorized credential harvesting and subsequent network compromise.