20K Ubiquiti IoT Cameras & Routers Are Sitting Ducks for Hackers

Researchers warn that tens of thousands of Ubiquiti SOHO devices remain vulnerable to CVE-2017-0938 due to an exposed discovery protocol on port 10001; although patched, roughly 20,000 devices still respond to Internet probes and can be abused for amplification DoS attacks and can leak identifiable owner and location information. Check Point observed evidence of compromise and noted the issue enables easy reconnaissance and social-engineering follow-on attacks; the underlying flaw has a CVSS score of 7.5 and the persistence of unpatched devices highlights broader IoT patching and update challenges.