Improper access control

2022-12-2315:15:00

PRIOn knowledge base

www.prio-n.com

access control

vulnerability

airmax

airfiber

uisp

data retrieval

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.5%

JSON

An improper access validation vulnerability exists in airMAX AC <8.7.11, airFiber 60/LR <2.6.2, airFiber 60 XG/HD <v1.0.0 and airFiber GBE <1.4.1 that allows a malicious actor to retrieve status and usage data from the UISP device.

CPENameOperatorVersion
airfiber_60-hd_firmwarelt1.0.0
airfiber_60-lr_firmwarelt2.6.2
airfiber_60-xg_firmwarelt1.0.0
airfiber_60_firmwarelt2.6.2
airfiber_gigabeam_firmwarelt1.4.1
airmax_ac_firmwarelt8.7.11

Name	Operator	Version
airfiber_60-hd_firmware	lt	1.0.0
airfiber_60-lr_firmware	lt	2.6.2
airfiber_60-xg_firmware	lt	1.0.0
airfiber_60_firmware	lt	2.6.2
airfiber_gigabeam_firmware	lt	1.4.1
airmax_ac_firmware	lt	8.7.11