Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2020-8168

We have recently released new version of AirMax AirOS firmware v6.3.0 for TI, XW and XM boards that fixes vulnerabilities found on AirMax AirOS v6.2.0 and prior TI, XW and XM boards, according to the description below:Attackers can abuse multiple end-points not protected against cross-site request forgery (CSRF), as a result authenticated users can be persuaded to visit malicious web pages, which allows attackers to perform arbitrary actions, such as downgrade the device's firmware to older versions, modify configuration, upload arbitrary firmware, exfiltrate files and tokens.Mitigation:Update to the latest AirMax AirOS firmware version available at the AirMax download page.

Published

2020-05-26T16:15:12.697

Last Modified

2024-11-21T05:38:25.507

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 8.8 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

8.6

Impact Score

6.4

Weaknesses
  • Type: Secondary
    CWE-352
  • Type: Primary
    CWE-352
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System ui airos ≤ 6.2.0 Yes
Hardware ui ag-hp-2g16 - No
Hardware ui ag-hp-2g20 - No
Hardware ui ag-hp-5g23 - No
Hardware ui ag-hp-5g27 - No
Hardware ui airgrid_m - No
Hardware ui airgrid_m2 - No
Hardware ui airgrid_m5 - No
Hardware ui ar - No
Hardware ui ar-hp - No
Hardware ui bm2-ti - No
Hardware ui bm2hp - No
Hardware ui bm5-ti - No
Hardware ui bm5hp - No
Hardware ui is-m5 - No
Hardware ui lbem5-23 - No
Hardware ui litestation_m5 - No
Hardware ui locom2 - No
Hardware ui locom5 - No
Hardware ui locom9 - No
Hardware ui m2 - No
Hardware ui m3 - No
Hardware ui m365 - No
Hardware ui m5 - No
Hardware ui m900 - No
Hardware ui nb-2g18 - No
Hardware ui nb-5g22 - No
Hardware ui nb-5g25 - No
Hardware ui nbe-m2-13 - No
Hardware ui nbe-m5-16 - No
Hardware ui nbe-m5-19 - No
Hardware ui nbm3 - No
Hardware ui nbm365 - No
Hardware ui nbm9 - No
Hardware ui nsm2 - No
Hardware ui nsm3 - No
Hardware ui nsm365 - No
Hardware ui nsm5 - No
Hardware ui pbe-m2-400 - No
Hardware ui pbe-m5-300 - No
Hardware ui pbe-m5-300-iso - No
Hardware ui pbe-m5-400 - No
Hardware ui pbe-m5-400-iso - No
Hardware ui pbe-m5-620 - No
Hardware ui pbm10 - No
Hardware ui pbm365 - No
Hardware ui pbm5 - No
Hardware ui picom2hp - No
Hardware ui power_ap_n - No
Hardware ui rm2-ti - No
Hardware ui rm5-ti - No
References