Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2015-9266

The web management interface of Ubiquiti airMAX, airFiber, airGateway and EdgeSwitch XP (formerly TOUGHSwitch) allows an unauthenticated attacker to upload and write arbitrary files using directory traversal techniques. An attacker can exploit this vulnerability to gain root privileges. This vulnerability is fixed in the following product versions (fixes released in July 2015, all prior versions are affected): airMAX AC 7.1.3; airMAX M (and airRouter) 5.6.2 XM/XW/TI, 5.5.11 XM/TI, and 5.5.10u2 XW; airGateway 1.1.5; airFiber AF24/AF24HD 2.2.1, AF5x 3.0.2.1, and AF5 2.2.1; airOS 4 XS2/XS5 4.0.4; and EdgeSwitch XP (formerly TOUGHSwitch) 1.3.2.

Published

2018-09-05T20:29:00.253

Last Modified

2024-11-21T02:40:12.417

Status

Modified

Source

[email protected]

Severity

CVSSv3.0: 9.8 (CRITICAL)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-22
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System ui airmax_ac_firmware 7.1.3 Yes
Hardware ui airmax_ac - No
Operating System ui airmax_m_xm_firmware < 5.6.2 Yes
Hardware ui airmax_m_xm - No
Operating System ui airmax_m_xw_firmware < 5.6.2 Yes
Hardware ui airmax_m_xw - No
Operating System ui airmax_m_ti_firmware < 5.6.2 Yes
Hardware ui airmax_m_ti - No
Operating System ui airgateway_firmware < 1.15 Yes
Hardware ui airgateway - No
Operating System ui airfiber_af24_firmware < 2.2.1 Yes
Hardware ui airfiber_af24 - No
Operating System ui airfiber_af24hd_firmware < 2.2.1 Yes
Hardware ui airfiber_af24hd - No
Operating System ui af5x_firmware < 3.0.2.1 Yes
Hardware ui af5x - No
Operating System ui af5_firmware < 2.2.1 Yes
Hardware ui af5 - No
Operating System ubnt airos_4_xs2 < 4.0.4 Yes
Operating System ubnt airos_4_xs5 < 4.0.4 Yes
Hardware ui airmax_ac - No
Hardware ui airmax_m - No
Operating System ubnt edgeswitch_xp_firmware < 1.3.2 Yes
Hardware ui edgeswitch_xp - No
References