CVE-2015-9266

🗓️ 05 Sep 2018 21:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 80 Views

The web management interface of Ubiquiti airMAX, airFiber, airGateway, and EdgeSwitch XP is vulnerable to unauthorized file upload and directory traversal

Reporter	Title	Published	Views	Family All 6
Circl	CVE-2015-9266	15 Apr 201600:00	–	circl
Check Point Advisories	Ubiquiti Multiple Products Arbitrary File Upload (CVE-2015-9266)	29 Sep 202100:00	–	checkpoint_advisories
Cvelist	CVE-2015-9266 Ubiquiti airOS HTTP(S) unauthenticated arbitrary file upload	5 Sep 201821:00	–	cvelist
Hacker One	Ubiquiti Inc.: Arbritrary file Upload on AirMax	1 Jul 201513:59	–	hackerone
NVD	CVE-2015-9266	5 Sep 201820:29	–	nvd
Prion	Directory traversal	5 Sep 201820:29	–	prion

NVD

Node

ui airmax_ac_firmwareMatch7.1.3

AND

ui airmax_acMatch-

Node

ui airmax_m_xm_firmwareRange<5.6.2

AND

ui airmax_m_xmMatch-

Node

ui airmax_m_xw_firmwareRange<5.6.2

AND

ui airmax_m_xwMatch-

Node

ui airmax_m_ti_firmwareRange<5.6.2

AND

ui airmax_m_tiMatch-

Node

ui airgateway_firmwareRange<1.15

AND

ui airgatewayMatch-

Node

ui airfiber_af24_firmwareRange<2.2.1

AND

ui airfiber_af24Match-

Node

ui airfiber_af24hd_firmwareRange<2.2.1

AND

ui airfiber_af24hdMatch-

Node

ui af5x_firmwareRange<3.0.2.1

AND

ui af5xMatch-

Node

ui af5_firmwareRange<2.2.1

AND

ui af5Match-

Node

ubnt airos_4_xs2Range<4.0.4

ubnt airos_4_xs5Range<4.0.4

AND

ui airmax_acMatch-

ui airmax_mMatch-

Node

ubnt edgeswitch_xp_firmwareRange<1.3.2

AND

ui edgeswitch_xpMatch-

Source	Link
exploit-db	www.exploit-db.com/exploits/39853/
exploit-db	www.exploit-db.com/exploits/39701/
hackerone	www.hackerone.com/reports/73480
community	www.community.ubnt.com/t5/airMAX-General-Discussion/Virus-attack-URGENT-UBNT/td-p/1562940
rapid7	www.rapid7.com/db/modules/exploit/linux/ssh/ubiquiti_airos_file_upload
community	www.community.ubnt.com/t5/airMAX-Updates-Blog/Security-Release-for-airMAX-TOUGHSwitch-and-airGateway-Released/ba-p/1300494
community	www.community.ubnt.com/t5/airMAX-Updates-Blog/Important-Security-Notice-and-airOS-5-6-5-Release/ba-p/1565949

21 Nov 2024 02:40Current

9.7High risk

Vulners AI Score9.7

CVSS 39.8

CVSS 210

EPSS0.78998

CWE-22