Ubiquiti airMAX Products Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in certain Ubiquiti airMAX products, including the UBB-XG (versions through 1.2.2), UDB-Pro/UDB-Pro-Sector (versions through 1.4.1), and UBB (versions through 3.1.5). This vulnerability allows a malicious actor within Wi-Fi range to exploit an issue in the airMAX Wireless Protocol, potentially leading to unauthorized code execution on the affected device.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected device.

Remediation

Users are advised to update UBB-XG to version 1.2.3 or later, UDB-Pro/UDB-Pro-Sector to version 1.4.2 or later, and UBB to version 3.1.7 or later.