Vulnerability · Published May 26, 2020 · Assigned by hackerone

CVE-2020-8168

High 8.8

In plain English

A high-severity cross-site request forgery in AirMax AirOS for TI, XW and XM boards. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 53% of all known vulnerabilities).

Severity (CVSS NVD)8.8High

Exploit odds (30 days)0.7%top 46.9% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

We have recently released new version of AirMax AirOS firmware v6.3.0 for TI, XW and XM boards that fixes vulnerabilities found on AirMax AirOS v6.2.0 and prior TI, XW and XM boards, according to the description below:Attackers can abuse multiple end-points not protected against cross-site request forgery (CSRF), as a result authenticated users can be persuaded to visit malicious web pages, which allows attackers to perform arbitrary actions, such as downgrade the device's firmware to older versions, modify configuration, upload arbitrary firmware, exfiltrate files and tokens.Mitigation:Update to the latest AirMax AirOS firmware version available at the AirMax download page.

Affected products (as reported)

Vendor	Product	Versions
n/a	AirMax AirOS for TI, XW and XM boards	Affected firmware versions v6.2.0 and priorFixed firmware version v6.3.0

Weakness: CWE-352

References

https://community.ui.com/releases/Security-advisory-bulletin-009-009/c45b6c35-2e0d-4aeb-a9ef-e1d49bcf5fd8%2C x_refsource_MISC
https://community.ui.com/releases/airMAX-M-v6-3-0/c8d5dec9-4030-4d7e-b23f-6a5b35ed3d83%2C x_refsource_MISC
https://www.ui.com/download/airmax-m x_refsource_MISC