This router gets the basics right, but the gaps are significant. A Ubiquiti employee stole customer data and attempted extortion. If any device on your Wi-Fi gets infected — a kid’s tablet, a smart bulb, a guest’s phone — it can reach your work laptop and banking app on the same flat network.
A C grade is not a sign-off. It means there are real, exploitable issues affecting this network every day.
-
If you set up this router with cloud credentials before the breach, an attacker may already have the login that controls your home network
If you set up this router with cloud credentials before the breach, an attacker may already have the login that controls your home network — including the firewall protecting your work laptop and security cameras. Reset it and turn on two-factor authentication.
Show technical detail
2021 insider data breach: A Ubiquiti employee stole customer data and attempted extortion. Cloud-connected UniFi accounts were potentially affected. Reset your UI account password and 2FA if you haven't since 2021.
-
If your manufacturer cloud login is breached, an attacker on the other side of the world can reconfigure your router
If your manufacturer cloud login is breached or the company suffers another insider incident, an attacker on the other side of the world can sign in and reconfigure the router your work laptop, security cameras, and smart locks all rely on.
Show technical detail
Cloud access expands attack surface: UniFi's remote management is powerful but adds attack surface. If you don't need remote access, disabling cloud management reduces your exposure significantly.
-
One wrong VLAN tag or firewall rule on this router silently exposes your devices to the open internet
A wrong VLAN tag or a misapplied firewall rule on this router silently exposes your work laptop or your security camera feed to the open internet — with no warning until something goes wrong. Powerful hardware doesn't protect you if a single port is set up wrong.
Show technical detail
Complex setup - misconfiguration risk: UniFi's advanced features require correct configuration to work securely. Default configurations may leave unused services exposed.
If a new vulnerability is found for your Ubiquiti UniFi Dream Machine Pro, we'll email you. One email per incident. No spam.