What’s Vulnerable › Vulnerabilities

CVE-2010-5330: Ubiquiti AirOS Command Injection Vulnerability

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: yes — in CISA KEV since 2022-04-15
• EPSS: 40.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-06-11 · updated 2026-06-16
• Weakness: CWE-77

Description

On certain Ubiquiti devices, Command Injection exists via a GET request to stainfo.cgi (aka Show AP info) because the ifname variable is not sanitized, as demonstrated by shell metacharacters. The fixed version is v4.0.1 for 802.11 ISP products, v5.3.5 for AirMax ISP products, and v5.4.5 for AirSync firmware. For example, Nanostation5 (Air OS) is affected.

Affected products

• AirMax AirOS for TI, XW and XM boards: before 4.0.1; from 4.0.2 before 5.3.5; from 5.3.6 before 5.4.5 — fixed in 4.0.1, 5.3.5, 5.4.5

How to fix

Upgrade to a fixed version: AirMax AirOS for TI, XW and XM boards 4.0.1, 5.3.5, 5.4.5. Check the vendor advisory for mitigations.

References

• https://community.ubnt.com/t5/airMAX-General-Discussion/AirOS-Security-Exploit-Updated-Firmware/td-p/212974
• https://www.exploit-db.com/exploits/14146
• https://community.ubnt.com/t5/airMAX-General-Discussion/AirOS-Security-Exploit-Updated-Firmware/td-p/212974
• https://www.exploit-db.com/exploits/14146
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-5330

Get alerted when CVE-2010-5330 or the next vulnerability affects your stack