CVE-2020-8170

Severity Score

6.1

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

We have recently released new version of AirMax AirOS firmware v6.3.0 for TI, XW and XM boards that fixes vulnerabilities found on AirMax AirOS v6.2.0 and prior TI, XW and XM boards, according to the description below:Multiple end-points with parameters vulnerable to reflected cross site scripting (XSS), allowing attackers to abuse the user' session information and/or account takeover of the admin user.Mitigation:Update to the latest AirMax AirOS firmware version available at the AirMax download page.

Recientemente hemos publicado una nueva versión del firmware AirMax AirOS v6.3.0 para tarjetas TI, XW y XM que corrige las vulnerabilidades encontradas en AirMax AirOS v6.2.0 y tarjetas TI, XW y XM anteriores, de acuerdo con la descripción a continuación: Múltiples endpoints con parámetros vulnerables a ataques de tipo cross site scripting (XSS) reflejado, permitiendo a atacantes abusar de la información de sesión del usuario y/o tomar control de la cuenta del usuario administrador. Mitigación: Actualice a la última versión del firmware AirMax AirOS disponible en la página de descargas de AirMax.

*Credits: N/A

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

None

Attack Vector

Network

Attack Complexity

Medium

Authentication

None

Confidentiality

None

Integrity

Partial

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2020-01-28 CVE Reserved
2020-05-26 CVE Published
2024-03-30 EPSS Updated
2024-08-04 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CAPEC

References (3)

URL	Tag	Source
https://www.ui.com/download/airmax-m	Release Notes

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
https://community.ui.com/releases/Security-advisory-bulletin-010-010/36a8448a-7dbf-4d30-bb54-398c44591dd4	2020-05-28
https://community.ui.com/releases/airMAX-M-v6-3-0/c8d5dec9-4030-4d7e-b23f-6a5b35ed3d83	2020-05-28

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Ui Search vendor "Ui"	Airos Search vendor "Ui" for product "Airos"	<= 6.2.0 Search vendor "Ui" for product "Airos" and version " <= 6.2.0"	-	Affected	in	Ui Search vendor "Ui"	Ag-hp-2g16 Search vendor "Ui" for product "Ag-hp-2g16"	-	-	Safe
Ui Search vendor "Ui"	Airos Search vendor "Ui" for product "Airos"	<= 6.2.0 Search vendor "Ui" for product "Airos" and version " <= 6.2.0"	-	Affected	in	Ui Search vendor "Ui"	Ag-hp-2g20 Search vendor "Ui" for product "Ag-hp-2g20"	-	-	Safe
Ui Search vendor "Ui"	Airos Search vendor "Ui" for product "Airos"	<= 6.2.0 Search vendor "Ui" for product "Airos" and version " <= 6.2.0"	-	Affected	in	Ui Search vendor "Ui"	Ag-hp-5g23 Search vendor "Ui" for product "Ag-hp-5g23"	-	-	Safe
Ui Search vendor "Ui"	Airos Search vendor "Ui" for product "Airos"	<= 6.2.0 Search vendor "Ui" for product "Airos" and version " <= 6.2.0"	-	Affected	in	Ui Search vendor "Ui"	Ag-hp-5g27 Search vendor "Ui" for product "Ag-hp-5g27"	-	-	Safe
Ui Search vendor "Ui"	Airos Search vendor "Ui" for product "Airos"	<= 6.2.0 Search vendor "Ui" for product "Airos" and version " <= 6.2.0"	-	Affected	in	Ui Search vendor "Ui"	Airgrid M Search vendor "Ui" for product "Airgrid M"	-	-	Safe
Ui Search vendor "Ui"	Airos Search vendor "Ui" for product "Airos"	<= 6.2.0 Search vendor "Ui" for product "Airos" and version " <= 6.2.0"	-	Affected	in	Ui Search vendor "Ui"	Airgrid M2 Search vendor "Ui" for product "Airgrid M2"	-	-	Safe
Ui Search vendor "Ui"	Airos Search vendor "Ui" for product "Airos"	<= 6.2.0 Search vendor "Ui" for product "Airos" and version " <= 6.2.0"	-	Affected	in	Ui Search vendor "Ui"	Airgrid M5 Search vendor "Ui" for product "Airgrid M5"	-	-	Safe
Ui Search vendor "Ui"	Airos Search vendor "Ui" for product "Airos"	<= 6.2.0 Search vendor "Ui" for product "Airos" and version " <= 6.2.0"	-	Affected	in	Ui Search vendor "Ui"	Ar Search vendor "Ui" for product "Ar"	-	-	Safe
Ui Search vendor "Ui"	Airos Search vendor "Ui" for product "Airos"	<= 6.2.0 Search vendor "Ui" for product "Airos" and version " <= 6.2.0"	-	Affected	in	Ui Search vendor "Ui"	Ar-hp Search vendor "Ui" for product "Ar-hp"	-	-	Safe
Ui Search vendor "Ui"	Airos Search vendor "Ui" for product "Airos"	<= 6.2.0 Search vendor "Ui" for product "Airos" and version " <= 6.2.0"	-	Affected	in	Ui Search vendor "Ui"	Bm2-ti Search vendor "Ui" for product "Bm2-ti"	-	-	Safe
Ui Search vendor "Ui"	Airos Search vendor "Ui" for product "Airos"	<= 6.2.0 Search vendor "Ui" for product "Airos" and version " <= 6.2.0"	-	Affected	in	Ui Search vendor "Ui"	Bm2hp Search vendor "Ui" for product "Bm2hp"	-	-	Safe
Ui Search vendor "Ui"	Airos Search vendor "Ui" for product "Airos"	<= 6.2.0 Search vendor "Ui" for product "Airos" and version " <= 6.2.0"	-	Affected	in	Ui Search vendor "Ui"	Bm5-ti Search vendor "Ui" for product "Bm5-ti"	-	-	Safe
Ui Search vendor "Ui"	Airos Search vendor "Ui" for product "Airos"	<= 6.2.0 Search vendor "Ui" for product "Airos" and version " <= 6.2.0"	-	Affected	in	Ui Search vendor "Ui"	Bm5hp Search vendor "Ui" for product "Bm5hp"	-	-	Safe
Ui Search vendor "Ui"	Airos Search vendor "Ui" for product "Airos"	<= 6.2.0 Search vendor "Ui" for product "Airos" and version " <= 6.2.0"	-	Affected	in	Ui Search vendor "Ui"	Is-m5 Search vendor "Ui" for product "Is-m5"	-	-	Safe
Ui Search vendor "Ui"	Airos Search vendor "Ui" for product "Airos"	<= 6.2.0 Search vendor "Ui" for product "Airos" and version " <= 6.2.0"	-	Affected	in	Ui Search vendor "Ui"	Lbem5-23 Search vendor "Ui" for product "Lbem5-23"	-	-	Safe
Ui Search vendor "Ui"	Airos Search vendor "Ui" for product "Airos"	<= 6.2.0 Search vendor "Ui" for product "Airos" and version " <= 6.2.0"	-	Affected	in	Ui Search vendor "Ui"	Litestation M5 Search vendor "Ui" for product "Litestation M5"	-	-	Safe
Ui Search vendor "Ui"	Airos Search vendor "Ui" for product "Airos"	<= 6.2.0 Search vendor "Ui" for product "Airos" and version " <= 6.2.0"	-	Affected	in	Ui Search vendor "Ui"	Locom2 Search vendor "Ui" for product "Locom2"	-	-	Safe
Ui Search vendor "Ui"	Airos Search vendor "Ui" for product "Airos"	<= 6.2.0 Search vendor "Ui" for product "Airos" and version " <= 6.2.0"	-	Affected	in	Ui Search vendor "Ui"	Locom5 Search vendor "Ui" for product "Locom5"	-	-	Safe
Ui Search vendor "Ui"	Airos Search vendor "Ui" for product "Airos"	<= 6.2.0 Search vendor "Ui" for product "Airos" and version " <= 6.2.0"	-	Affected	in	Ui Search vendor "Ui"	Locom9 Search vendor "Ui" for product "Locom9"	-	-	Safe
Ui Search vendor "Ui"	Airos Search vendor "Ui" for product "Airos"	<= 6.2.0 Search vendor "Ui" for product "Airos" and version " <= 6.2.0"	-	Affected	in	Ui Search vendor "Ui"	M2 Search vendor "Ui" for product "M2"	-	-	Safe
Ui Search vendor "Ui"	Airos Search vendor "Ui" for product "Airos"	<= 6.2.0 Search vendor "Ui" for product "Airos" and version " <= 6.2.0"	-	Affected	in	Ui Search vendor "Ui"	M3 Search vendor "Ui" for product "M3"	-	-	Safe
Ui Search vendor "Ui"	Airos Search vendor "Ui" for product "Airos"	<= 6.2.0 Search vendor "Ui" for product "Airos" and version " <= 6.2.0"	-	Affected	in	Ui Search vendor "Ui"	M365 Search vendor "Ui" for product "M365"	-	-	Safe
Ui Search vendor "Ui"	Airos Search vendor "Ui" for product "Airos"	<= 6.2.0 Search vendor "Ui" for product "Airos" and version " <= 6.2.0"	-	Affected	in	Ui Search vendor "Ui"	M5 Search vendor "Ui" for product "M5"	-	-	Safe
Ui Search vendor "Ui"	Airos Search vendor "Ui" for product "Airos"	<= 6.2.0 Search vendor "Ui" for product "Airos" and version " <= 6.2.0"	-	Affected	in	Ui Search vendor "Ui"	M900 Search vendor "Ui" for product "M900"	-	-	Safe
Ui Search vendor "Ui"	Airos Search vendor "Ui" for product "Airos"	<= 6.2.0 Search vendor "Ui" for product "Airos" and version " <= 6.2.0"	-	Affected	in	Ui Search vendor "Ui"	Nb-2g18 Search vendor "Ui" for product "Nb-2g18"	-	-	Safe
Ui Search vendor "Ui"	Airos Search vendor "Ui" for product "Airos"	<= 6.2.0 Search vendor "Ui" for product "Airos" and version " <= 6.2.0"	-	Affected	in	Ui Search vendor "Ui"	Nb-5g22 Search vendor "Ui" for product "Nb-5g22"	-	-	Safe
Ui Search vendor "Ui"	Airos Search vendor "Ui" for product "Airos"	<= 6.2.0 Search vendor "Ui" for product "Airos" and version " <= 6.2.0"	-	Affected	in	Ui Search vendor "Ui"	Nb-5g25 Search vendor "Ui" for product "Nb-5g25"	-	-	Safe
Ui Search vendor "Ui"	Airos Search vendor "Ui" for product "Airos"	<= 6.2.0 Search vendor "Ui" for product "Airos" and version " <= 6.2.0"	-	Affected	in	Ui Search vendor "Ui"	Nbe-m2-13 Search vendor "Ui" for product "Nbe-m2-13"	-	-	Safe
Ui Search vendor "Ui"	Airos Search vendor "Ui" for product "Airos"	<= 6.2.0 Search vendor "Ui" for product "Airos" and version " <= 6.2.0"	-	Affected	in	Ui Search vendor "Ui"	Nbe-m5-16 Search vendor "Ui" for product "Nbe-m5-16"	-	-	Safe
Ui Search vendor "Ui"	Airos Search vendor "Ui" for product "Airos"	<= 6.2.0 Search vendor "Ui" for product "Airos" and version " <= 6.2.0"	-	Affected	in	Ui Search vendor "Ui"	Nbe-m5-19 Search vendor "Ui" for product "Nbe-m5-19"	-	-	Safe
Ui Search vendor "Ui"	Airos Search vendor "Ui" for product "Airos"	<= 6.2.0 Search vendor "Ui" for product "Airos" and version " <= 6.2.0"	-	Affected	in	Ui Search vendor "Ui"	Nbm3 Search vendor "Ui" for product "Nbm3"	-	-	Safe
Ui Search vendor "Ui"	Airos Search vendor "Ui" for product "Airos"	<= 6.2.0 Search vendor "Ui" for product "Airos" and version " <= 6.2.0"	-	Affected	in	Ui Search vendor "Ui"	Nbm365 Search vendor "Ui" for product "Nbm365"	-	-	Safe
Ui Search vendor "Ui"	Airos Search vendor "Ui" for product "Airos"	<= 6.2.0 Search vendor "Ui" for product "Airos" and version " <= 6.2.0"	-	Affected	in	Ui Search vendor "Ui"	Nbm9 Search vendor "Ui" for product "Nbm9"	-	-	Safe
Ui Search vendor "Ui"	Airos Search vendor "Ui" for product "Airos"	<= 6.2.0 Search vendor "Ui" for product "Airos" and version " <= 6.2.0"	-	Affected	in	Ui Search vendor "Ui"	Nsm2 Search vendor "Ui" for product "Nsm2"	-	-	Safe
Ui Search vendor "Ui"	Airos Search vendor "Ui" for product "Airos"	<= 6.2.0 Search vendor "Ui" for product "Airos" and version " <= 6.2.0"	-	Affected	in	Ui Search vendor "Ui"	Nsm3 Search vendor "Ui" for product "Nsm3"	-	-	Safe
Ui Search vendor "Ui"	Airos Search vendor "Ui" for product "Airos"	<= 6.2.0 Search vendor "Ui" for product "Airos" and version " <= 6.2.0"	-	Affected	in	Ui Search vendor "Ui"	Nsm365 Search vendor "Ui" for product "Nsm365"	-	-	Safe
Ui Search vendor "Ui"	Airos Search vendor "Ui" for product "Airos"	<= 6.2.0 Search vendor "Ui" for product "Airos" and version " <= 6.2.0"	-	Affected	in	Ui Search vendor "Ui"	Nsm5 Search vendor "Ui" for product "Nsm5"	-	-	Safe
Ui Search vendor "Ui"	Airos Search vendor "Ui" for product "Airos"	<= 6.2.0 Search vendor "Ui" for product "Airos" and version " <= 6.2.0"	-	Affected	in	Ui Search vendor "Ui"	Pbe-m2-400 Search vendor "Ui" for product "Pbe-m2-400"	-	-	Safe
Ui Search vendor "Ui"	Airos Search vendor "Ui" for product "Airos"	<= 6.2.0 Search vendor "Ui" for product "Airos" and version " <= 6.2.0"	-	Affected	in	Ui Search vendor "Ui"	Pbe-m5-300 Search vendor "Ui" for product "Pbe-m5-300"	-	-	Safe
Ui Search vendor "Ui"	Airos Search vendor "Ui" for product "Airos"	<= 6.2.0 Search vendor "Ui" for product "Airos" and version " <= 6.2.0"	-	Affected	in	Ui Search vendor "Ui"	Pbe-m5-300-iso Search vendor "Ui" for product "Pbe-m5-300-iso"	-	-	Safe
Ui Search vendor "Ui"	Airos Search vendor "Ui" for product "Airos"	<= 6.2.0 Search vendor "Ui" for product "Airos" and version " <= 6.2.0"	-	Affected	in	Ui Search vendor "Ui"	Pbe-m5-400 Search vendor "Ui" for product "Pbe-m5-400"	-	-	Safe
Ui Search vendor "Ui"	Airos Search vendor "Ui" for product "Airos"	<= 6.2.0 Search vendor "Ui" for product "Airos" and version " <= 6.2.0"	-	Affected	in	Ui Search vendor "Ui"	Pbe-m5-400-iso Search vendor "Ui" for product "Pbe-m5-400-iso"	-	-	Safe
Ui Search vendor "Ui"	Airos Search vendor "Ui" for product "Airos"	<= 6.2.0 Search vendor "Ui" for product "Airos" and version " <= 6.2.0"	-	Affected	in	Ui Search vendor "Ui"	Pbe-m5-620 Search vendor "Ui" for product "Pbe-m5-620"	-	-	Safe
Ui Search vendor "Ui"	Airos Search vendor "Ui" for product "Airos"	<= 6.2.0 Search vendor "Ui" for product "Airos" and version " <= 6.2.0"	-	Affected	in	Ui Search vendor "Ui"	Pbm10 Search vendor "Ui" for product "Pbm10"	-	-	Safe
Ui Search vendor "Ui"	Airos Search vendor "Ui" for product "Airos"	<= 6.2.0 Search vendor "Ui" for product "Airos" and version " <= 6.2.0"	-	Affected	in	Ui Search vendor "Ui"	Pbm365 Search vendor "Ui" for product "Pbm365"	-	-	Safe
Ui Search vendor "Ui"	Airos Search vendor "Ui" for product "Airos"	<= 6.2.0 Search vendor "Ui" for product "Airos" and version " <= 6.2.0"	-	Affected	in	Ui Search vendor "Ui"	Pbm5 Search vendor "Ui" for product "Pbm5"	-	-	Safe
Ui Search vendor "Ui"	Airos Search vendor "Ui" for product "Airos"	<= 6.2.0 Search vendor "Ui" for product "Airos" and version " <= 6.2.0"	-	Affected	in	Ui Search vendor "Ui"	Picom2hp Search vendor "Ui" for product "Picom2hp"	-	-	Safe
Ui Search vendor "Ui"	Airos Search vendor "Ui" for product "Airos"	<= 6.2.0 Search vendor "Ui" for product "Airos" and version " <= 6.2.0"	-	Affected	in	Ui Search vendor "Ui"	Power Ap N Search vendor "Ui" for product "Power Ap N"	-	-	Safe
Ui Search vendor "Ui"	Airos Search vendor "Ui" for product "Airos"	<= 6.2.0 Search vendor "Ui" for product "Airos" and version " <= 6.2.0"	-	Affected	in	Ui Search vendor "Ui"	Rm2-ti Search vendor "Ui" for product "Rm2-ti"	-	-	Safe
Ui Search vendor "Ui"	Airos Search vendor "Ui" for product "Airos"	<= 6.2.0 Search vendor "Ui" for product "Airos" and version " <= 6.2.0"	-	Affected	in	Ui Search vendor "Ui"	Rm5-ti Search vendor "Ui" for product "Rm5-ti"	-	-	Safe