This vulnerability (CWE-787) involves an out-of-bounds write in Ubiquiti Dream Machines UniFi gateway devices. An unauthenticated attacker with network access can exploit this flaw to trigger a Denial of Service (DoS) by causing the device to crash or become unresponsive. The CVSS v3.1 base score is 7.5, reflecting high severity due to the network attack vector, low attack complexity, no privileges or user interaction required, and impact limited to availability. The affected versions include all versions prior to 5.1.31, 4.0.21, and 5.1.26 as explicitly stated. There is no vendor advisory or patch link provided, so patch status is not confirmed.

Successful exploitation results in a Denial of Service (DoS) on the affected UniFi gateway device, disrupting network availability. There is no impact on confidentiality or integrity. The attack requires only network access and no privileges or user interaction, making it relatively easy to exploit within the network.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to trusted users and monitor device availability. No official patch or workaround information is provided in the input data.