A customized exploit for the Log4j vulnerability is targeting Ubiquiti’s UniFi Network applications. The vulnerability has a CVSS score of 10 and allows a malicious actor to perform remote code execution. UniFi released a patch on Dec. 10 and fixed the issue in the UniFi network Version 6.5.54 and later. The attack is only effective against devices that have not been updated. The unique quality of the attack is that the command-and-control server is correlated to a previous SolarWinds attack, as reported by CrowdStrike.”]
Source: https://www.databreachtoday.com/log4j-puts-vulnerable-ubiquiti-network-applications-at-risk-a-18429