Ubiquiti AirControl Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in Ubiquiti AirControl version 1.4.2. This vulnerability allows unauthenticated attackers to execute arbitrary system commands by injecting malicious Java expressions. Exploitation occurs through the '/.seam' endpoint, where crafted URLs can be used to execute commands with the application's system privileges.

Impact

Exploitation of this vulnerability allows for pre-authentication remote code execution on the affected system.

Reproduction

To reproduce this vulnerability, send a GET request to the target AirControl server's '.seam' endpoint. Include a crafted URL that embeds Java expressions designed to execute system commands. The injected command's output can be retrieved by parsing the response.