| Ubiquiti UniFi Protect G4 Bullet (UVC-G4-BULLET)
|
|
Security Grade
Calculator v1
|
UniFi Protect G4 Bullet
Release Date: 2022-09-05 • Status: In sale
|
Security Evaluation
1. Device Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Known hardware tampering
|
Rare
|
—
|
No hardware tampering reports found in my search.
|
| Known vulnerabilities
|
Rare
|
🔗 Proof
|
Many CVEs on UniFi Protect cameras since 2025: CVE-2025-23115 to 23119 (incl. unauthenticated code execution, firmware validation bypass) and CVE-2025-23123 (heap overflow RCE, CVSS 10.0); all fixed in later firmware.
|
| Prior attacks
|
Very common
|
🔗 Proof
|
Flaws were reported by researchers; no in-the-wild exploitation found in my search.
|
| Updatability
|
Very common
|
🔗 Proof
|
Ubiquiti publishes security bulletins and fixes (e.g. firmware 4.74.106, 4.75.62); some G4 cameras needed manual resets after the update.
|
| Category Score
|
Score: 2 / 3
|
2. System Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Authentication with other systems
|
Partial
|
🔗 Proof
|
Authentication bypass bugs found: CVE-2025-23116 (Protect app), CVE-2026-21633 (discovery protocol), CVE-2025-23118 (insufficient certificate validation).
|
| Communications
|
Encrypted with up-to-date encryption
|
🔗 Proof
|
Management over HTTPS; weaknesses found in certificate validation (CVE-2025-23118) and a static firmware-image key (CVE-2025-23117), fixed in 4.74.106.
|
| Storage
|
No encryption
|
—
|
No public documentation of storage encryption found; camera has 256 MB flash and is managed by UniFi Protect.
|
| Category Score
|
Score: 2 / 3
|
3. User Authentication
| Criterion
|
Value
|
Proof
|
Comment
|
| Account management
|
Full
|
🔗 Proof
|
Managed through UniFi Protect
|
| Authentication
|
Basic
|
🔗 Proof
|
Authentication bypass issues were found and fixed (CVE-2025-23116, CVE-2026-21633); no two-factor documentation checked for this camera.
|
| Brute-force protection
|
Basic
|
—
|
No public documentation found.
|
| Event logging
|
Partial logging
|
🔗 Proof
|
UniFi Protect provides event recordings and reports; no documented access log found.
|
| Passwords
|
Require change after setup
|
—
|
Camera is adopted and managed by UniFi Protect; no default user password documented in my search.
|
| Category Score
|
Score: 2 / 3
|
Technical Specifications
| Property
|
Details
|
| Operating System & App
|
Not disclosed (UniFi Protect firmware) (Companion App: UniFi Protect)
|
| Hardware (CPU / GPU)
|
CPU: Quad-core Arm Cortex-A53-based chip • GPU: Not disclosed
|
| Memory & Storage
|
Memory: 512 MB DDR3L • Storage: 256 MB flash
|
| Power, Battery & Charging
|
Battery: None • Power: 802.3af PoE (mode A & B), max 4 W • Charging: N/A
|
| Display & Camera
|
Display: None • Camera: 5 MP CMOS sensor, 2688×1512 at 24 fps, H.264, 86° (H) / 60° (V) / 111° (D) view, IR LEDs with IR-cut filter
|
| Sound & Connectivity
|
Sound: Built-in microphone • Connectivity: Gigabit Ethernet (RJ45)
|
| Physical (Dimensions & Mass)
|
Dimensions: Ø75 × 140 mm • Mass: 458 g (520 g with mount)
|
The UniFi Protect G4 Bullet is a PoE bullet camera managed by UniFi Protect. Since 2025 several serious CVEs were disclosed for UniFi Protect cameras, including unauthenticated code execution and an RCE flaw with CVSS 10.0. Ubiquiti published security bulletins and fixed these in firmware 4.74.106 and 4.75.62, though some updates caused reconnect problems. Positives are active vendor patching and centralized management; weaknesses are limited public documentation of storage encryption and brute-force protection.
