Airos vulnerabilities

1 known vulnerability in Airos from UI. 1 is rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Ubiquiti AirOS Command Injection Exploited

  CVE-2010-5330Jun 11, 2019UIEPSS 40.2%

  On certain Ubiquiti devices, Command Injection exists via a GET request to stainfo.cgi (aka Show AP info) because the ifname variable is not sanitized, as demonstrated by shell metacharacters. The fixed version is v4.0.1 for 802.11 ISP products, v5.3.5 for Air