$ cve CVE-2020-8171 JSON

CVE-2020-8171

9.8

CRITICAL · CVSS 3.1 · EPSS 3.9% (pctl 90)

In your normal cycle

Critical by CVSS (9.8), but no sign of active exploitation.

Description

We have recently released new version of AirMax AirOS firmware v6.3.0 for TI, XW and XM boards that fixes vulnerabilities found on AirMax AirOS v6.2.0 and prior TI, XW and XM boards, according to the description below:There are certain end-points containing functionalities that are vulnerable to command injection. It is possible to craft an input string that passes the filter check but still contains commands, resulting in remote code execution.Mitigation:Update to the latest AirMax AirOS firmware version available at the AirMax download page.

Scoring

CVSS	9.8 (CRITICAL, v3.1)
Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS	3.88% — more likely to be exploited than 90% of all CVEs
Weakness	CWE-77
On CISA KEV	no
Public exploit	none known
Published	2020-05-26
Last modified	2026-06-17

Affected (40)

Vendor	Product
ui	ag-hp-2g16
ui	ag-hp-2g20
ui	ag-hp-5g23
ui	ag-hp-5g27
ui	airgrid m
ui	airgrid m2
ui	airgrid m5
ui	airos
ui	ar
ui	ar-hp
ui	bm2-ti
ui	bm2hp
ui	bm5-ti
ui	bm5hp
ui	is-m5
ui	lbem5-23
ui	litestation m5
ui	locom2
ui	locom5
ui	locom9
ui	m2
ui	m3
ui	m365
ui	m5
ui	m900
ui	nb-2g18
ui	nb-5g22
ui	nb-5g25
ui	nbe-m2-13
ui	nbe-m5-16
ui	nbe-m5-19
ui	nbm3
ui	nbm365
ui	nbm9
ui	nsm2
ui	nsm3
ui	nsm365
ui	nsm5
ui	pbe-m2-400
ui	pbe-m5-300

References

→ the Explorer · watch your stack · NVD