Ltu Ptmp
Monthly
Heap-based buffer overflow (CWE-122) in Ubiquiti airMAX M, LTU PTMP, LTU PTP and SolarPoint/SolarSwitch firmware lets an attacker who is already on the adjacent network (CVSS AV:A) execute arbitrary code on the device with no authentication and no user interaction (CVSS 3.1 base 8.8, PR:N/UI:N), giving full confidentiality, integrity and availability impact. The adjacency requirement, not any account or feature prerequisite, is the limiting factor: default deployments of unpatched versions are exposed once the attacker shares the wireless link or local L2 segment. Fixed firmware is available from the vendor (airMAX M 6.3.26, LTU PTMP 2.4.2, LTU PTP 1.5.7, SolarPoint/SolarSwitch 2.0.3); there is no CISA KEV listing and no public exploit was identified at time of analysis, and EPSS is low (0.21%, 12th percentile), which places this at a this_week rather than emergency priority.
Heap-based buffer overflow (CWE-122) in Ubiquiti airMAX M, LTU PTMP, LTU PTP and SolarPoint/SolarSwitch firmware lets an attacker who is already on the adjacent network (CVSS AV:A) execute arbitrary code on the device with no authentication and no user interaction (CVSS 3.1 base 8.8, PR:N/UI:N), giving full confidentiality, integrity and availability impact. The adjacency requirement, not any account or feature prerequisite, is the limiting factor: default deployments of unpatched versions are exposed once the attacker shares the wireless link or local L2 segment. Fixed firmware is available from the vendor (airMAX M 6.3.26, LTU PTMP 2.4.2, LTU PTP 1.5.7, SolarPoint/SolarSwitch 2.0.3); there is no CISA KEV listing and no public exploit was identified at time of analysis, and EPSS is low (0.21%, 12th percentile), which places this at a this_week rather than emergency priority.