Lucene search
+L

7 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 2:48 a.m.•16 views

CVE-2010-5330

On certain Ubiquiti devices, Command Injection exists via a GET request to stainfo.cgi aka Show AP info because the ifname variable is not sanitized, as demonstrated by shell metacharacters. The fixed version is v4.0.1 for 802.11 ISP products, v5.3.5 for AirMax ISP products, and v5.4.5 for AirSyn...

9.8CVSS7.2AI score0.39362EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2019/06/13 12:00 a.m.•14 views

VulnCheck KEV: CVE-2010-5330

Certain Ubiquiti devices contain a command injection vulnerability via a GET request to stainfo.cgi...

9.8CVSS8.2AI score0.39362EPSS
SaveIn wildExploits0References5
NVD
NVD
•added 2019/06/11 9:29 p.m.•32 views

CVE-2010-5330

On certain Ubiquiti devices, Command Injection exists via a GET request to stainfo.cgi aka Show AP info because the ifname variable is not sanitized, as demonstrated by shell metacharacters. The fixed version is v4.0.1 for 802.11 ISP products, v5.3.5 for AirMax ISP products, and v5.4.5 for AirSyn...

9.8CVSS9.5AI score0.39362EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2019/06/11 8:46 p.m.•43 views

CVE-2010-5330

On certain Ubiquiti devices, Command Injection exists via a GET request to stainfo.cgi aka Show AP info because the ifname variable is not sanitized, as demonstrated by shell metacharacters. The fixed version is v4.0.1 for 802.11 ISP products, v5.3.5 for AirMax ISP products, and v5.4.5 for AirSyn...

9.5AI score0.39362EPSS
SaveExploits0References2
CVE
CVE
•added 2019/06/11 8:46 p.m.•1160 views

CVE-2010-5330

CVE-2010-5330 covers a command injection in Ubiquiti devices via GET to stainfo.cgi. The issue arises because the ifname parameter is not sanitized, enabling shell metacharacters to be injected. Affected families include Ubiquiti AirOS (before 4.0.1), AirMax ISP products (before 5.3.5), and AirSy...

9.8CVSS9.3AI score0.39362EPSS
SaveIn wildExploits0References3Affected Software1
attackerkb
attackerkb
•added 2019/06/11 12:00 a.m.•36 views

CVE-2010-5330

On certain Ubiquiti devices, Command Injection exists via a GET request to stainfo.cgi aka Show AP info because the ifname variable is not sanitized, as demonstrated by shell metacharacters. The fixed version is v4.0.1 for 802.11 ISP products, v5.3.5 for AirMax ISP products, and v5.4.5 for AirSyn...

9.8CVSS5.2AI score0.39362EPSS
SaveIn wildExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/06/11 12:00 a.m.•6 views

CVE-2010-5330: Improper Neutralization of Special Elements used in a Command

On certain Ubiquiti devices, Command Injection exists via a GET request to stainfo.cgi aka Show AP info because the ifname variable is not sanitized, as demonstrated by shell metacharacters. The fixed version is v4.0.1 for 802.11 ISP products, v5.3.5 for AirMax ISP products, and v5.4.5 for AirSyn...

9.8CVSS5.8AI score0.39362EPSS
SaveExploits0References2
Rows per page
Query Builder