CVE-2022-44565

Severity: medium (CVSS 5.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-12-23 · updated 2026-06-17
Weakness: CWE-284

Description

An improper access validation vulnerability exists in airMAX AC <8.7.11, airFiber 60/LR <2.6.2, airFiber 60 XG/HD <v1.0.0 and airFiber GBE <1.4.1 that allows a malicious actor to retrieve status and usage data from the UISP device.

Affected products

Ui Airfiber 60-Hd Firmware: before 1.0.0 — fixed in 1.0.0
Ui Airfiber 60-Lr Firmware: before 2.6.2 — fixed in 2.6.2
Ui Airfiber 60-Xg Firmware: before 1.0.0 — fixed in 1.0.0
Ui Airfiber 60 Firmware: before 2.6.2 — fixed in 2.6.2
Ui Airfiber Gigabeam Firmware: before 1.4.1 — fixed in 1.4.1
Ui Airmax Ac Firmware: before 8.7.11 — fixed in 8.7.11

How to fix

Upgrade to a fixed version: Ui Airfiber 60-Hd Firmware 1.0.0; Ui Airfiber 60-Lr Firmware 2.6.2; Ui Airfiber 60-Xg Firmware 1.0.0; Ui Airfiber 60 Firmware 2.6.2; Ui Airfiber Gigabeam Firmware 1.4.1; Ui Airmax Ac Firmware 8.7.11. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2022-44565 or the next vulnerability affects your stack