CVE-2010-5330 KEV
9.8
CRITICAL · CVSS 3.1 · EPSS 39.4% (pctl 99)
Patch first
On CISA KEV — known exploited in the wild, due 2022-05-06.
Description
On certain Ubiquiti devices, Command Injection exists via a GET request to stainfo.cgi (aka Show AP info) because the ifname variable is not sanitized, as demonstrated by shell metacharacters. The fixed version is v4.0.1 for 802.11 ISP products, v5.3.5 for AirMax ISP products, and v5.4.5 for AirSync firmware. For example, Nanostation5 (Air OS) is affected.
Scoring
| CVSS | 9.8 (CRITICAL, v3.1) |
|---|---|
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 39.36% — more likely to be exploited than 99% of all CVEs |
| Weakness | CWE-77 |
| On CISA KEV | yes — remediate by 2022-05-06 |
| Public exploit | none known |
| Published | 2019-06-11 |
| Last modified | 2026-06-16 |
CISA KEV
| Name | Ubiquiti AirOS Command Injection Vulnerability |
|---|---|
| Added | 2022-04-15 |
| Due | 2022-05-06 |
| Vendor / product | Ubiquiti / AirOS |
| Ransomware use | none reported |
Affected (1)
| Vendor | Product |
|---|---|
| ui | airos |
References
- https://community.ubnt.com/t5/airMAX-General-Discussion/AirOS-Security-Exploit-Updated-Firmware/td-p/212974
- https://www.exploit-db.com/exploits/14146
- https://community.ubnt.com/t5/airMAX-General-Discussion/AirOS-Security-Exploit-Updated-Firmware/td-p/212974
- https://www.exploit-db.com/exploits/14146
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-5330
→ the Explorer · watch your stack · NVD