CVE-2015-9266 Ubiquiti airOS HTTP(S) unauthenticated arbitrary file upload

🗓️ 05 Sep 2018 21:00:00Reported by mitreType

cvelist

cvelist🔗 www.cve.org👁 17 Views

Ubiquiti airOS HTTP(S) unauthenticated file upload vulnerabilit

Reporter	Title	Published	Views	Family All 6
Circl	CVE-2015-9266	15 Apr 201600:00	–	circl
Check Point Advisories	Ubiquiti Multiple Products Arbitrary File Upload (CVE-2015-9266)	29 Sep 202100:00	–	checkpoint_advisories
CVE	CVE-2015-9266	5 Sep 201821:00	–	cve
Hacker One	Ubiquiti Inc.: Arbritrary file Upload on AirMax	1 Jul 201513:59	–	hackerone
NVD	CVE-2015-9266	5 Sep 201820:29	–	nvd
Prion	Directory traversal	5 Sep 201820:29	–	prion

Source	Link
rapid7	www.rapid7.com/db/modules/exploit/linux/ssh/ubiquiti_airos_file_upload
hackerone	www.hackerone.com/reports/73480
exploit-db	www.exploit-db.com/exploits/39853/
exploit-db	www.exploit-db.com/exploits/39701/
community	www.community.ubnt.com/t5/airMAX-General-Discussion/Virus-attack-URGENT-UBNT/td-p/1562940
community	www.community.ubnt.com/t5/airMAX-Updates-Blog/Important-Security-Notice-and-airOS-5-6-5-Release/ba-p/1565949
community	www.community.ubnt.com/t5/airMAX-Updates-Blog/Security-Release-for-airMAX-TOUGHSwitch-and-airGateway-Released/ba-p/1300494

05 Sep 2018 20:57Current

9.7High risk

Vulners AI Score9.7

CVSS 39.8

EPSS0.78998

ubiquiti airos http unauthenticated file upload vulnerability