CVE-2010-5330
critical · 9.8Actively exploitedOn the CISA Known Exploited Vulnerabilities catalog
Apply updates per vendor instructions.
Added 2022-04-15Remediation due 2022-05-06
On certain Ubiquiti devices, Command Injection exists via a GET request to stainfo.cgi (aka Show AP info) because the ifname variable is not sanitized, as demonstrated by shell metacharacters. The fixed version is v4.0.1 for 802.11 ISP products, v5.3.5 for AirMax ISP products, and v5.4.5 for AirSync firmware. For example, Nanostation5 (Air OS) is affected.
9.8
CVSS
33.8%
EPSS (exploit prob.)
98th
EPSS percentile
2019-06-11
Published
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-77
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| ui | airos | < 4.0.1 |
| ui | airos | >= 4.0.2, < 5.3.5 |
| ui | airos | >= 5.3.6, < 5.4.5 |
Check a specific version with /api/v1/cve/match.
References
- https://community.ubnt.com/t5/airMAX-General-Discussion/AirOS-Security-Exploit-Updated-Firmware/td-p/212974
- https://www.exploit-db.com/exploits/14146
- https://community.ubnt.com/t5/airMAX-General-Discussion/AirOS-Security-Exploit-Updated-Firmware/td-p/212974
- https://www.exploit-db.com/exploits/14146
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-5330
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2010-5330