Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-c4v2-98hc-pvh9

Опубликовано: 02 фев. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 5.9

Описание

The use of the cyclic redundancy check (CRC) algorithm for integrity check during firmware update makes Ubiquiti airFiber AF2X Radio firmware version 3.2.2 and earlier vulnerable to firmware modification attacks. An attacker can conduct a man-in-the-middle (MITM) attack to modify the new firmware image and bypass the checksum verification.

The use of the cyclic redundancy check (CRC) algorithm for integrity check during firmware update makes Ubiquiti airFiber AF2X Radio firmware version 3.2.2 and earlier vulnerable to firmware modification attacks. An attacker can conduct a man-in-the-middle (MITM) attack to modify the new firmware image and bypass the checksum verification.

EPSS

Процентиль: 30%
0.00109
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-354

Связанные уязвимости

CVSS3: 5.9
nvd
около 3 лет назад

The use of the cyclic redundancy check (CRC) algorithm for integrity check during firmware update makes Ubiquiti airFiber AF2X Radio firmware version 3.2.2 and earlier vulnerable to firmware modification attacks. An attacker can conduct a man-in-the-middle (MITM) attack to modify the new firmware image and bypass the checksum verification.

CVSS3: 5.9
fstec
около 3 лет назад

Уязвимость микропрограммного обеспечения радиорелейной станции Ubiquiti airFiber AF2X Radio, связанная с некорректным подтверждением значения проверки целостности, позволяющая нарушителю реализовать атаку «человек посередине»

EPSS

Процентиль: 30%
0.00109
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-354