Actively exploited · Published Jun 11, 2019 · Assigned by mitre

CVE-2010-5330

Critical 9.8 Exploited

In plain English

A critical-severity command injection in AirOS from Ubiquiti. Attackers are actively exploiting it in the wild (listed by CISA on April 15, 2022). The chance it is exploited in the next 30 days is estimated at 40.2% (higher than 99% of all known vulnerabilities). Apply updates per vendor instructions.

Severity (CVSS 3.1)9.8Critical

Exploit odds (30 days)40.2%top 1.4% of all CVEs

Exploited in the wildYesCISA KEV since Apr 15, 2022

Attack toolingNoneno public tooling known

CISA guidance

Apply updates per vendor instructions.

Federal agencies must remediate by May 6, 2022.

Official description

On certain Ubiquiti devices, Command Injection exists via a GET request to stainfo.cgi (aka Show AP info) because the ifname variable is not sanitized, as demonstrated by shell metacharacters. The fixed version is v4.0.1 for 802.11 ISP products, v5.3.5 for AirMax ISP products, and v5.4.5 for AirSync firmware. For example, Nanostation5 (Air OS) is affected.

Affected products (as reported)

Vendor	Product	Versions
n/a	n/a	n/a

Weakness: CWE-77 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

https://www.exploit-db.com/exploits/14146 x_refsource_MISC
https://community.ubnt.com/t5/airMAX-General-Discussion/AirOS-Security-Exploit-Updated-Firmware/td-p/212974 x_refsource_MISC
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-5330 government-resource