Ubiquiti users began accessing other customers’ devices on December 13 through the company’s UniFi cloud service.

Earlier this week, users of Ubiquiti networking devices, from routers to security cameras, reported seeing other people’s devices and notifications via the company’s UniFi cloud services. Ubiquiti investigated this incident and issued a statement saying the bug, caused by an incorrect configuration in an update, has been fixed.

Various notifications

Ubiquiti is a network equipment manufacturer that offers a cloud-based UniFi platform. Here administrators can manage all their devices via a cloud portal. However, Ubiquiti users noticed that they were able to access other people’s routers and security cameras after an accidental notification from another device to one of the users.

Another customer was able to see 88 devices from another account after logging into the UniFi Site Manager portal. As soon as the portal website was updated, the user was shown their own devices again.

Incorrect configuration during upgrade

After a detailed review of this incident, Ubiquiti released its statement. It says that the flaw, which allows access to other customers’ devices, was caused by a misconfiguration during a UniFi cloud infrastructure upgrade.

The problem occurred on December 13th but is now reported to have been resolved. The company continues to investigate this incident, but also notes that only twelve accounts were inappropriately contacted by other customers.