Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2020-8170

We have recently released new version of AirMax AirOS firmware v6.3.0 for TI, XW and XM boards that fixes vulnerabilities found on AirMax AirOS v6.2.0 and prior TI, XW and XM boards, according to the description below:Multiple end-points with parameters vulnerable to reflected cross site scripting (XSS), allowing attackers to abuse the user' session information and/or account takeover of the admin user.Mitigation:Update to the latest AirMax AirOS firmware version available at the AirMax download page.

Published

2020-05-26T16:15:12.773

Last Modified

2024-11-21T05:38:25.770

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.1 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: PARTIAL
  • Availability Impact: NONE
Exploitability Score

8.6

Impact Score

2.9

Weaknesses
  • Type: Secondary
    CWE-79
  • Type: Primary
    CWE-79
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System ui airos ≤ 6.2.0 Yes
Hardware ui ag-hp-2g16 - No
Hardware ui ag-hp-2g20 - No
Hardware ui ag-hp-5g23 - No
Hardware ui ag-hp-5g27 - No
Hardware ui airgrid_m - No
Hardware ui airgrid_m2 - No
Hardware ui airgrid_m5 - No
Hardware ui ar - No
Hardware ui ar-hp - No
Hardware ui bm2-ti - No
Hardware ui bm2hp - No
Hardware ui bm5-ti - No
Hardware ui bm5hp - No
Hardware ui is-m5 - No
Hardware ui lbem5-23 - No
Hardware ui litestation_m5 - No
Hardware ui locom2 - No
Hardware ui locom5 - No
Hardware ui locom9 - No
Hardware ui m2 - No
Hardware ui m3 - No
Hardware ui m365 - No
Hardware ui m5 - No
Hardware ui m900 - No
Hardware ui nb-2g18 - No
Hardware ui nb-5g22 - No
Hardware ui nb-5g25 - No
Hardware ui nbe-m2-13 - No
Hardware ui nbe-m5-16 - No
Hardware ui nbe-m5-19 - No
Hardware ui nbm3 - No
Hardware ui nbm365 - No
Hardware ui nbm9 - No
Hardware ui nsm2 - No
Hardware ui nsm3 - No
Hardware ui nsm365 - No
Hardware ui nsm5 - No
Hardware ui pbe-m2-400 - No
Hardware ui pbe-m5-300 - No
Hardware ui pbe-m5-300-iso - No
Hardware ui pbe-m5-400 - No
Hardware ui pbe-m5-400-iso - No
Hardware ui pbe-m5-620 - No
Hardware ui pbm10 - No
Hardware ui pbm365 - No
Hardware ui pbm5 - No
Hardware ui picom2hp - No
Hardware ui power_ap_n - No
Hardware ui rm2-ti - No
Hardware ui rm5-ti - No
References