A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and

Summary

A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and SolarSwitch devices to execute arbitrary code on the device.

Remediation

1. Inventory every Ubiquiti Inc airMAX M deployment, including staging.
2. Upgrade Ubiquiti Inc airMAX M to the fixed version for your release line, listed under Affected versions.
3. Confirm the running version after the upgrade.

References

• Referencehttps://uisp.community.ui.com/releases/Security-Advisory-Bulletin-071/7d4d42cf-09e4-44d3-9c19-649cac8c6af3