Ui Airos — known CVE vulnerabilities

Every CVE whose affected-product data names Ui Airos, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2010-5330 — CVSS 9.8 (critical) — actively exploited: On certain Ubiquiti devices, Command Injection exists via a GET request to stainfo.cgi (aka Show AP info) because the ifname variable is…
• CVE-2020-8171 — CVSS 9.8 (critical): We have recently released new version of AirMax AirOS firmware v6.3.0 for TI, XW and XM boards that fixes vulnerabilities found on AirMax…
• CVE-2020-8168 — CVSS 8.8 (high): We have recently released new version of AirMax AirOS firmware v6.3.0 for TI, XW and XM boards that fixes vulnerabilities found on AirMax…
• CVE-2017-0938 — CVSS 7.5 (high): Denial of Service attack in airMAX < 8.3.2 , airMAX < 6.0.7 and EdgeMAX < 1.9.7 allow attackers to use the Discovery Protocol in…
• CVE-2020-8170 — CVSS 6.1 (medium): We have recently released new version of AirMax AirOS firmware v6.3.0 for TI, XW and XM boards that fixes vulnerabilities found on AirMax…