Airmax Ac Firmware
Monthly
Remote code execution in Ubiquiti airMAX and airFiber wireless devices lets an attacker within Wi-Fi range run arbitrary code by abusing the proprietary airMAX Wireless Protocol. The flaw (a command injection, CWE-77) affects airMAX AC (≤ 8.7.20), airMAX M (≤ 6.3.22), airFiber AF60-XG (≤ 1.2.2), and airFiber AF60 (≤ 2.6.7), and requires only radio proximity rather than network authentication. No public exploit identified at time of analysis, and the EPSS score is low (0.07%), so exploitation is currently theoretical despite the high CVSS of 8.8.
An improper access validation vulnerability exists in airMAX AC <8.7.11, airFiber 60/LR <2.6.2, airFiber 60 XG/HD <v1.0.0 and airFiber GBE <1.4.1 that allows a malicious actor to retrieve status and. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
Remote code execution in Ubiquiti airMAX and airFiber wireless devices lets an attacker within Wi-Fi range run arbitrary code by abusing the proprietary airMAX Wireless Protocol. The flaw (a command injection, CWE-77) affects airMAX AC (≤ 8.7.20), airMAX M (≤ 6.3.22), airFiber AF60-XG (≤ 1.2.2), and airFiber AF60 (≤ 2.6.7), and requires only radio proximity rather than network authentication. No public exploit identified at time of analysis, and the EPSS score is low (0.07%), so exploitation is currently theoretical despite the high CVSS of 8.8.
An improper access validation vulnerability exists in airMAX AC <8.7.11, airFiber 60/LR <2.6.2, airFiber 60 XG/HD <v1.0.0 and airFiber GBE <1.4.1 that allows a malicious actor to retrieve status and. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.