| Ubiquiti UniFi Dream Machine (UDM)
|
|
Security Grade
Calculator v
|
Ubiquiti UniFi Dream Machine (UDM)
Release Date: 2020-03-27 • Status: End of sale
|
Security Evaluation
1. Device Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Known hardware tampering
|
Rare
|
[1] 🔗 Proof
|
A physical reset button is exposed and eMMC storage is soldered; local physical access is required. Rare is an exposure judgment.
|
| Known vulnerabilities
|
Rare
|
[2] 🔗 Proof
|
UniFi OS on Dream Machines has published auth-bypass CVEs; the cited affected builds are historical and fixed in the assessed release.
|
| Prior attacks
|
Rare
|
🔗 Proof
|
The cited 2021/2022 incident concerns Ubiquiti cloud/account systems and customer configuration backups; it does not identify UDM hardware itself as a victim.
|
| Updatability
|
Very common
|
[3] 🔗 Proof
|
UniFi OS Dream Machines receives repeated maintenance and security updates, including 2026 advisories; automatic update is supported.
|
| Category Score
|
Score: 2 / 3
|
2. System Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Authentication with other systems
|
Partial
|
[4] 🔗 Proof
|
Remote/cloud administration uses the Ubiquiti account SSO; local console login remains a separate local admin account. No external LDAP/RADIUS admin integration is configured.
|
| Communications
|
Encrypted with up-to-date encryption
|
[5] 🔗 Proof
|
Local web management uses HTTPS, remote access to the Ubiquiti cloud runs over TLS, and the assessed Wi-Fi profile uses WPA2/WPA3.
|
| Storage
|
No encryption
|
[6] 🔗 Proof
|
Configuration and system data reside on the 16 GB on-board eMMC flash; no at-rest encryption of the eMMC is declared in the assessed profile.
|
| Category Score
|
Score: 2 / 3
|
3. User Authentication
| Criterion
|
Value
|
Proof
|
Comment
|
| Account management
|
Full
|
[7] 🔗 Proof
|
UniFi OS manages the owner admin account, additional admins and their permissions, removal and password changes.
|
| Authentication
|
Secure
|
[8] 🔗 Proof
|
The assessed profile enables MFA on the bound Ubiquiti account in addition to the local admin password.
|
| Brute-force protection
|
Exist
|
🔗 Proof
|
Repeated failed logins are throttled with HTTP 429 and an AUTHENTICATION_FAILED_LIMIT_REACHED response.
|
| Event logging
|
Access event logged
|
[9] 🔗 Proof
|
UniFi OS keeps local admin access and login events; failed login attempts produce a logged rate-limit event.
|
| Passwords
|
Require change after setup with complexity requirements
|
[10] 🔗 Proof
|
There is no static factory password; first-run setup requires creating a Ubiquiti account and local admin credentials with the required complexity.
|
| Category Score
|
Score: 1 / 3
|
Technical Specifications
| Property
|
Details
|
| Operating System & App
|
UniFi OS (Dream Machines); assessment: UniFi OS 5.1.31 or later (Companion App: UniFi Network mobile app (iOS/Android); web management via ui.com or local console)
|
| Hardware (CPU / GPU)
|
CPU: Quad-core Arm Cortex-A57 at 1.7 GHz • GPU:
|
| Memory & Storage
|
Memory: 2 GB DDR • Storage: 16 GB on-board eMMC flash; the base UDM has no internal drive bay
|
| Power, Battery & Charging
|
Battery: • Power: 100–240 VAC, 50/60 Hz; max 26 W; AC power cord • Charging:
|
| Display & Camera
|
Display: Status LED light (front LED ring); no LCD screen • Camera:
|
| Sound & Connectivity
|
Sound: • Connectivity: 1 × GbE RJ45 WAN; 4 × GbE RJ45 LAN; integrated dual-band 802.11ac (Wi-Fi 5); Bluetooth
|
| Physical (Dimensions & Mass)
|
Dimensions: Ø110 × 184.2 mm (diameter × height) • Mass: 1.1 kg (2.3 lb)
|
Documentation-based security assessment: Ubiquiti UniFi Dream Machine (UDM). Reviewed 2026-10-24.
Documentation-based assessment of a defined UniFi OS 5.1.31-or-later UDM profile. The console is adopted and managed through the UniFi Network mobile app / web UI and bound to a Ubiquiti account; MFA is enabled on that account in this profile. A local administrator account is created with a strong password. Local web management runs over HTTPS, and remote access to the console goes through the Ubiquiti cloud over TLS. The integrated Wi-Fi is configured with WPA2/WPA3. Automatic firmware updates are enabled. The base UDM has 16 GB of on-board eMMC flash and no internal drive bay, so there is no mounted encrypted data volume in this profile; the eMMC is not declared encrypted. The physical reset button behaviour is retained. These are the explicitly selected conditions of this document assessment, not a claim about factory defaults or an inspected physical unit.
Ratings map documented capabilities and the stated configuration to WikiIoT choices. Rare / Uncommon are qualitative assessments of documented bounded exposure/history, not measured frequencies. Prior attacks is explicitly platform-level history concerning Ubiquiti cloud and account systems; the sources do not identify UDM hardware itself as a confirmed victim. Optional capabilities are not treated as enabled unless the assessment configuration states so (e.g., MFA is rated Secure only because it is enabled in this profile). Communications are rated Full because management and remote links in the profile are encrypted. Storage covers the on-board eMMC user/config data; no at-rest encryption is declared. Historical CVEs do not imply that the selected patched firmware remains vulnerable.
Release-date scope: 2020-03-27, the date the UDM stable firmware branch was made available per the community release record; not asserted to be the earliest worldwide pre-order or retail date.
Historical vulnerability: CVE-2026-77550. A CRLF injection in UniFi OS allowed a network-adjacent actor to bypass authentication on UniFi OS devices, including Dream Machines running UniFi OS 5.1.21 and earlier; fixed in UniFi OS for Dream Machines 5.1.31 or later. This assessment uses 5.1.31 or later.
No physical device was tested. Keep the configuration and evidence scope with the ratings.
References:
UDM official tech specs
UDM official store page
UDM Quick Start Guide
UDM firmware release history (community)
UniFi Security Advisory Bulletin 067
CVE-2026-77550 — UniFi OS CRLF auth bypass
Security Now! #813 — reporting on the Ubiquiti cloud incident
Ubiquiti Trust Center — edge-first, local processing
UniFi account multi-factor authentication setup
Ubiquiti community — login attempt limit (429)
WikiIoT methodology
