A malicious actor with access to the adjacent network and under certain conditions could exploit a Stored Cross-Site Scripting (XSS) vulnerability fou

Summary

A malicious actor with access to the adjacent network and under certain conditions could exploit a Stored Cross-Site Scripting (XSS) vulnerability found in airMAX M devices to escalate privileges on the device.

Remediation

1. Inventory every Ubiquiti Inc airMAX M deployment, including staging.
2. Upgrade Ubiquiti Inc airMAX M to 6.3.26.
3. Confirm the running version after the upgrade.

References

• Referencehttps://uisp.community.ui.com/releases/Security-Advisory-Bulletin-071/7d4d42cf-09e4-44d3-9c19-649cac8c6af3