MEDIUM✓ PATCH🇵🇱 Wersja polska

CVE-2022-44565

CVSS 5.3v3.1pub. 2022-12-23upd. 2025-04-15

An improper access validation vulnerability exists in airMAX AC <8.7.11, airFiber 60/LR <2.6.2, airFiber 60 XG/HD <v1.0.0 and airFiber GBE <1.4.1 that allows a malicious actor to retrieve status and usage data from the UISP device.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

  • Ui Airfiber 60

    HW
    Ui
    wszystkie wersje

  • Ui Airfiber 60 Firmware

    OS
    Ui
    < 2.6.2

  • Ui Airfiber 60 Hd

    HW
    Ui
    wszystkie wersje

  • Ui Airfiber 60 Hd Firmware

    OS
    Ui
    < 1.0.0

  • Ui Airfiber 60 Lr

    HW
    Ui
    wszystkie wersje

  • Ui Airfiber 60 Lr Firmware

    OS
    Ui
    < 2.6.2

  • Ui Airfiber 60 Xg

    HW
    Ui
    wszystkie wersje

  • Ui Airfiber 60 Xg Firmware

    OS
    Ui
    < 1.0.0

  • Ui Airfiber Gigabeam

    HW
    Ui
    wszystkie wersje

  • Ui Airfiber Gigabeam Firmware

    OS
    Ui
    < 1.4.1

  • Ui Airmax Ac

    HW
    Ui
    wszystkie wersje

  • Ui Airmax Ac Firmware

    OS
    Ui
    < 8.7.11
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
References

Related vulnerabilities

CVE-2015-9266CRITICAL9.8ten sam produkt

The web management interface of Ubiquiti airMAX, airFiber, airGateway and EdgeSwitch XP (formerly TOUGHSwitch)...

CVE-2017-0938HIGH7.5ten sam produkt

Denial of Service attack in airMAX < 8.3.2 , airMAX < 6.0.7 and EdgeMAX < 1.9.7 allow attackers to use the Dis...

CVE-2026-21639MEDIUM5.4ten sam produkt

A malicious actor in Wi-Fi range of the affected product could leverage a vulnerability in the airMAX Wireless...

CVE-2026-34908CRITICAL10.0⚠ KEVPL ✓ten sam vendor

Nieprawidłowa kontrola dostępu w UniFi OS — nieautoryzowane zmiany systemowe

CVE-2026-34909CRITICAL10.0⚠ KEVPL ✓ten sam vendor

Path Traversal w UniFi OS — dostęp do plików systemowych i przejęcie konta