Lucene search

K
hackerone93c08539H1:73480
HistoryJul 01, 2015 - 1:59 p.m.

Ubiquiti Inc.: Arbritrary file Upload on AirMax

2015-07-0113:59:44
93c08539
hackerone.com
45

0.015 Low

EPSS

Percentile

86.9%

It’s possible to upload arbitrary files to airMAX devices via HTTP because of a vulnerability in the airOS web server.

An attacker can bypass the device’s authentication mechanisms by exploiting this vulnerability.

0.015 Low

EPSS

Percentile

86.9%