Airfiber Af60 Xg Firmware
Monthly
Remote code execution in Ubiquiti airMAX and airFiber wireless devices lets an attacker within Wi-Fi range run arbitrary code by abusing the proprietary airMAX Wireless Protocol. The flaw (a command injection, CWE-77) affects airMAX AC (≤ 8.7.20), airMAX M (≤ 6.3.22), airFiber AF60-XG (≤ 1.2.2), and airFiber AF60 (≤ 2.6.7), and requires only radio proximity rather than network authentication. No public exploit identified at time of analysis, and the EPSS score is low (0.07%), so exploitation is currently theoretical despite the high CVSS of 8.8.
Remote code execution in Ubiquiti airMAX and airFiber wireless devices lets an attacker within Wi-Fi range run arbitrary code by abusing the proprietary airMAX Wireless Protocol. The flaw (a command injection, CWE-77) affects airMAX AC (≤ 8.7.20), airMAX M (≤ 6.3.22), airFiber AF60-XG (≤ 1.2.2), and airFiber AF60 (≤ 2.6.7), and requires only radio proximity rather than network authentication. No public exploit identified at time of analysis, and the EPSS score is low (0.07%), so exploitation is currently theoretical despite the high CVSS of 8.8.