This vulnerability (CWE-284) involves improper access control in Ubiquiti's UniFi Play PowerAmp and UniFi Play Audio Port devices. It allows an attacker with network access to the UniFi Play environment to retrieve WiFi credentials, potentially compromising network security. The issue affects specific versions of these products and has a CVSS 3.1 base score of 7.5, indicating a high severity due to network attack vector, low attack complexity, no privileges or user interaction required, and high confidentiality impact. Vendor-provided updates mitigate this vulnerability.

Successful exploitation allows an attacker on the UniFi Play network to obtain WiFi credentials, leading to potential unauthorized network access and confidentiality breach. There is no indication of impact on integrity or availability. No known exploits are reported in the wild at this time.

Apply the official vendor updates: upgrade UniFi Play PowerAmp to version 1.0.38 or later and UniFi Play Audio Port to version 1.1.9 or later. These updates address the improper access control vulnerability. Since patches are available, remediation should be prioritized to prevent unauthorized access to WiFi credentials.