CVE-2020-8168
Summary
| CVE | CVE-2020-8168 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2020-05-26 16:15:00 UTC |
| Updated | 2023-11-07 03:26:00 UTC |
| Description | We have recently released new version of AirMax AirOS firmware v6.3.0 for TI, XW and XM boards that fixes vulnerabilities found on AirMax AirOS v6.2.0 and prior TI, XW and XM boards, according to the description below:Attackers can abuse multiple end-points not protected against cross-site request forgery (CSRF), as a result authenticated users can be persuaded to visit malicious web pages, which allows attackers to perform arbitrary actions, such as downgrade the device's firmware to older versions, modify configuration, upload arbitrary firmware, exfiltrate files and tokens.Mitigation:Update to the latest AirMax AirOS firmware version available at the AirMax download page. |
Risk And Classification
Problem Types: CWE-352
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Ui | Ag-hp-2g16 | - | All | All | All |
| Hardware | Ui | Ag-hp-2g16 | - | All | All | All |
| Hardware | Ui | Ag-hp-2g20 | - | All | All | All |
| Hardware | Ui | Ag-hp-2g20 | - | All | All | All |
| Hardware | Ui | Ag-hp-5g23 | - | All | All | All |
| Hardware | Ui | Ag-hp-5g23 | - | All | All | All |
| Hardware | Ui | Ag-hp-5g27 | - | All | All | All |
| Hardware | Ui | Ag-hp-5g27 | - | All | All | All |
| Hardware | Ui | Airgrid M | - | All | All | All |
| Hardware | Ui | Airgrid M | - | All | All | All |
| Hardware | Ui | Airgrid M2 | - | All | All | All |
| Hardware | Ui | Airgrid M2 | - | All | All | All |
| Hardware | Ui | Airgrid M5 | - | All | All | All |
| Hardware | Ui | Airgrid M5 | - | All | All | All |
| Operating System | Ui | Airos | All | All | All | All |
| Hardware | Ui | Ar | - | All | All | All |
| Hardware | Ui | Ar | - | All | All | All |
| Hardware | Ui | Ar-hp | - | All | All | All |
| Hardware | Ui | Ar-hp | - | All | All | All |
| Hardware | Ui | Bm2-ti | - | All | All | All |
| Hardware | Ui | Bm2-ti | - | All | All | All |
| Hardware | Ui | Bm2hp | - | All | All | All |
| Hardware | Ui | Bm2hp | - | All | All | All |
| Hardware | Ui | Bm5-ti | - | All | All | All |
| Hardware | Ui | Bm5-ti | - | All | All | All |
| Hardware | Ui | Bm5hp | - | All | All | All |
| Hardware | Ui | Bm5hp | - | All | All | All |
| Hardware | Ui | Is-m5 | - | All | All | All |
| Hardware | Ui | Is-m5 | - | All | All | All |
| Hardware | Ui | Lbem5-23 | - | All | All | All |
| Hardware | Ui | Lbem5-23 | - | All | All | All |
| Hardware | Ui | Litestation M5 | - | All | All | All |
| Hardware | Ui | Litestation M5 | - | All | All | All |
| Hardware | Ui | Locom2 | - | All | All | All |
| Hardware | Ui | Locom2 | - | All | All | All |
| Hardware | Ui | Locom5 | - | All | All | All |
| Hardware | Ui | Locom5 | - | All | All | All |
| Hardware | Ui | Locom9 | - | All | All | All |
| Hardware | Ui | Locom9 | - | All | All | All |
| Hardware | Ui | M2 | - | All | All | All |
| Hardware | Ui | M2 | - | All | All | All |
| Hardware | Ui | M3 | - | All | All | All |
| Hardware | Ui | M3 | - | All | All | All |
| Hardware | Ui | M365 | - | All | All | All |
| Hardware | Ui | M365 | - | All | All | All |
| Hardware | Ui | M5 | - | All | All | All |
| Hardware | Ui | M5 | - | All | All | All |
| Hardware | Ui | M900 | - | All | All | All |
| Hardware | Ui | M900 | - | All | All | All |
| Hardware | Ui | Nb-2g18 | - | All | All | All |
| Hardware | Ui | Nb-2g18 | - | All | All | All |
| Hardware | Ui | Nb-5g22 | - | All | All | All |
| Hardware | Ui | Nb-5g22 | - | All | All | All |
| Hardware | Ui | Nb-5g25 | - | All | All | All |
| Hardware | Ui | Nb-5g25 | - | All | All | All |
| Hardware | Ui | Nbe-m2-13 | - | All | All | All |
| Hardware | Ui | Nbe-m2-13 | - | All | All | All |
| Hardware | Ui | Nbe-m5-16 | - | All | All | All |
| Hardware | Ui | Nbe-m5-16 | - | All | All | All |
| Hardware | Ui | Nbe-m5-19 | - | All | All | All |
| Hardware | Ui | Nbe-m5-19 | - | All | All | All |
| Hardware | Ui | Nbm3 | - | All | All | All |
| Hardware | Ui | Nbm3 | - | All | All | All |
| Hardware | Ui | Nbm365 | - | All | All | All |
| Hardware | Ui | Nbm365 | - | All | All | All |
| Hardware | Ui | Nbm9 | - | All | All | All |
| Hardware | Ui | Nbm9 | - | All | All | All |
| Hardware | Ui | Nsm2 | - | All | All | All |
| Hardware | Ui | Nsm2 | - | All | All | All |
| Hardware | Ui | Nsm3 | - | All | All | All |
| Hardware | Ui | Nsm3 | - | All | All | All |
| Hardware | Ui | Nsm365 | - | All | All | All |
| Hardware | Ui | Nsm365 | - | All | All | All |
| Hardware | Ui | Nsm5 | - | All | All | All |
| Hardware | Ui | Nsm5 | - | All | All | All |
| Hardware | Ui | Pbe-m2-400 | - | All | All | All |
| Hardware | Ui | Pbe-m2-400 | - | All | All | All |
| Hardware | Ui | Pbe-m5-300 | - | All | All | All |
| Hardware | Ui | Pbe-m5-300 | - | All | All | All |
| Hardware | Ui | Pbe-m5-300-iso | - | All | All | All |
| Hardware | Ui | Pbe-m5-300-iso | - | All | All | All |
| Hardware | Ui | Pbe-m5-400 | - | All | All | All |
| Hardware | Ui | Pbe-m5-400 | - | All | All | All |
| Hardware | Ui | Pbe-m5-400-iso | - | All | All | All |
| Hardware | Ui | Pbe-m5-400-iso | - | All | All | All |
| Hardware | Ui | Pbe-m5-620 | - | All | All | All |
| Hardware | Ui | Pbe-m5-620 | - | All | All | All |
| Hardware | Ui | Pbm10 | - | All | All | All |
| Hardware | Ui | Pbm10 | - | All | All | All |
| Hardware | Ui | Pbm365 | - | All | All | All |
| Hardware | Ui | Pbm365 | - | All | All | All |
| Hardware | Ui | Pbm5 | - | All | All | All |
| Hardware | Ui | Pbm5 | - | All | All | All |
| Hardware | Ui | Picom2hp | - | All | All | All |
| Hardware | Ui | Picom2hp | - | All | All | All |
| Hardware | Ui | Power Ap N | - | All | All | All |
| Hardware | Ui | Power Ap N | - | All | All | All |
| Hardware | Ui | Rm2-ti | - | All | All | All |
| Hardware | Ui | Rm2-ti | - | All | All | All |
| Hardware | Ui | Rm5-ti | - | All | All | All |
| Hardware | Ui | Rm5-ti | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| community.ui.com/releases/airMAX-M-v6-3-0/c8d5dec9-4030-4d7e-b23f-6a5b35ed3d83%2C | community.ui.com | ||
| community.ui.com/releases/Security-advisory-bulletin-009-009/c45b6c35-2e0d-4ae... | community.ui.com | ||
| Ubiquiti - Downloads | MISC | www.ui.com | Release Notes |
| Security advisory bulletin 009 | Ubiquiti Community | MISC | community.ui.com | Vendor Advisory |
| Ubiquiti Community | MISC | community.ui.com | Not Applicable |
| community.ui.com/releases/Security-advisory-bulletin-009-009/c45b6c35-2e0d-4ae... | MISC | community.ui.com | Not Applicable |
| v6.3.0 | Ubiquiti Community | MISC | community.ui.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.