MEDIUM✓ PATCH🇵🇱 Wersja polska

CVE-2022-44565

CVSS 5.3v3.1pub. 2022-12-23upd. 2025-04-15

An improper access validation vulnerability exists in airMAX AC <8.7.11, airFiber 60/LR <2.6.2, airFiber 60 XG/HD <v1.0.0 and airFiber GBE <1.4.1 that allows a malicious actor to retrieve status and usage data from the UISP device.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

  • Ui Airfiber 60

    HW
    Ui
    all versions

  • Ui Airfiber 60 Firmware

    OS
    Ui
    < 2.6.2

  • Ui Airfiber 60 Hd

    HW
    Ui
    all versions

  • Ui Airfiber 60 Hd Firmware

    OS
    Ui
    < 1.0.0

  • Ui Airfiber 60 Lr

    HW
    Ui
    all versions

  • Ui Airfiber 60 Lr Firmware

    OS
    Ui
    < 2.6.2

  • Ui Airfiber 60 Xg

    HW
    Ui
    all versions

  • Ui Airfiber 60 Xg Firmware

    OS
    Ui
    < 1.0.0

  • Ui Airfiber Gigabeam

    HW
    Ui
    all versions

  • Ui Airfiber Gigabeam Firmware

    OS
    Ui
    < 1.4.1

  • Ui Airmax Ac

    HW
    Ui
    all versions

  • Ui Airmax Ac Firmware

    OS
    Ui
    < 8.7.11
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
References

Related vulnerabilities

CVE-2015-9266CRITICAL9.8PL ✓same product

Ubiquiti airMAX/airFiber/EdgeSwitch XP — path traversal umożliwia zapis plików jako root

CVE-2026-21639HIGH8.8same product

A malicious actor in Wi-Fi range of the affected product could leverage a vulnerability in the airMAX Wireless...

CVE-2017-0938HIGH7.5same product

Denial of Service attack in airMAX < 8.3.2 , airMAX < 6.0.7 and EdgeMAX < 1.9.7 allow attackers to use the Dis...

CVE-2026-34908CRITICAL10.0⚠ KEVPL ✓same vendor

Nieprawidłowa kontrola dostępu w UniFi OS — nieautoryzowane zmiany systemowe

CVE-2026-34909CRITICAL10.0⚠ KEVPL ✓same vendor

Path Traversal w UniFi OS — dostęp do plików systemowych i przejęcie konta