PT-2019-6598 · Ubiquiti · Airmax Isp+2

Published 2019-06-11 · Updated 2024-12-19 · CVE-2010-5330

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Ubiquiti AirOS versions prior to 4.0.1 Ubiquiti AirMax ISP products versions prior to 5.3.5 Ubiquiti AirSync firmware versions prior to 5.4.5

Description On certain Ubiquiti devices, Command Injection exists via a GET request to "stainfo.cgi" (aka Show AP info) because the ifname variable is not sanitized, as demonstrated by shell metacharacters.

Recommendations For versions prior to 4.0.1, update to version 4.0.1 or later. For AirMax ISP products prior to 5.3.5, update to version 5.3.5 or later. For AirSync firmware prior to 5.4.5, update to version 5.4.5 or later. As a temporary workaround, consider restricting access to the "stainfo.cgi" endpoint until a patch is available.

Fix

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2010-5330

Affected Products

Airmax Isp

Airos

Airsync

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2010-5330 · Security Note
• https://community.ubnt.com/t5/airMAX-General-Discussion/AirOS-Security-Exploit-Updated-Firmware/td-p/212974 · Vendor Advisory
• https://t.me/cibsecurity/4851 · Telegram Post
• https://t.me/cvenotify/104985 · Telegram Post
• https://exploit-db.com/exploits/14146 · Note