fflo/mfi-controller repository overview

⁠Docker ubnt mfi-controller

About The Ubiquiti Networks mFi Controller 2.1.12 software allows you to manage your Ubiquiti/UBNT mPort, mPower, sensor, in-wall, and third-party devices from your web browser.

To keep your data secure, this docker image provides you the latest mFi Controller software 2.1.12 (beta) patched using the unofficial ikkisoft mFiPatch⁠.

Background

• The latest Ubiquiti Networks mFi Controller 2.1.11⁠ software suffers from a serious bug allowing full remote access and control⁠ of any unpatched mFi setup. SecuriTeam tried to contact UBNT several times⁠ to resolve this issue, unfortunately without receiving an answer.
• Ubiquiti Networks mFi Controller 2.1.12 included Log4j v1.2.15, which is vulnerable to CVE-2019-17571⁠. This docker images fixed this issue updating log4j to CVE-20219-17571 patched version of Log4j v1.2.17⁠.

This ready to run docker image provides you an unofficial patched version of mFi controller which does not suffer from this serious bug.

Usage To start a mfi-controller instance running the latest version:

$ docker create -v /var/lib/mfi --name mfi-controller-data busybox /bin/true

$ docker run --volumes-from=mfi-controller-data --name mfi-controller \
   -p 3478:3478/udp -p 6080:6080 -p 6443:6443 fflo/mfi-controller

Instead of using a mfi-controller-data container you may also mount any local directory to mfi-controller, i.e.

$ docker run --name mfi-controller -v /[your-local-mFi-path]:/var/lib/mfi \
   -p 3478:3478/udp -p 6080:6080 -p 6443:6443 fflo/mfi-controller

Service ports This docker image allows you to expose the following ports:

• 2323/tcp
• 6080/tcp
• 6443/tcp
• 6843/tcp
• 6880/tcp
• 1900/udp
• 3478/udp
• 10001/udp

Running a non-local cloud setup you usually only need to expose the tcp ports 6080 (mFi equipment configuration port), 6443 (mFi controller management) and udp port 3478 (stun server for mFi devices behind nat routers).

Debug / Logfile By default, mFi controller will dump any log information to the Docker logs. To debug use:

$ docker logs -t mfi-controller