CVE-2026-21638

Опубликовано: 08 янв. 2026

Источник: nvd

CVSS3: 8.8

EPSS Низкий

Описание

A malicious actor in Wi-Fi range of the affected product could leverage a vulnerability in the airMAX Wireless Protocol to achieve a remote code execution (RCE) within the affected product.

Affected Products: UBB-XG (Version 1.2.2 and earlier) UDB-Pro/UDB-Pro-Sector (Version 1.4.1 and earlier) UBB (Version 3.1.5 and earlier)

Mitigation: Update your UBB-XG to Version 1.2.3 or later. Update your UDB-Pro/UDB-Pro-Sector to Version 1.4.2 or later. Update your UBB to Version 3.1.7 or later.

Ссылки

https://community.ui.com/releases/Security-Advisory-Bulletin-060-060/cde18da7-2bc4-41bb-a9cc-48a4a4c479c1
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:ui:ubb-xg_firmware:*:*:*:*:*:*:*:*

Версия до 1.2.3 (исключая)

cpe:2.3:h:ui:ubb-xg:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:ui:udb-pro_firmware:*:*:*:*:*:*:*:*

Версия до 1.4.2 (исключая)

cpe:2.3:h:ui:udb-pro:-:*:*:*:*:*:*:*

Конфигурация 3

Одновременно

cpe:2.3:o:ui:udb-pro-sector_firmware:*:*:*:*:*:*:*:*

Версия до 1.4.2 (исключая)

cpe:2.3:h:ui:udb-pro-sector:-:*:*:*:*:*:*:*

Конфигурация 4

Одновременно

cpe:2.3:o:ui:ubb_firmware:*:*:*:*:*:*:*:*

Версия до 3.1.7 (исключая)

cpe:2.3:h:ui:ubb:-:*:*:*:*:*:*:*

EPSS

Процентиль: 31%

0.00116

Низкий

8.8 High

CVSS3

Дефекты

CWE-77

Связанные уязвимости

GHSA-m92x-4jg5-v4px

CVSS3: 8.8

github

30 дней назад

A malicious actor in Wi-Fi range of the affected product could leverage a vulnerability in the airMAX Wireless Protocol to achieve a remote code execution (RCE) within the affected product. Affected Products: UBB-XG (Version 1.2.2 and earlier) UDB-Pro/UDB-Pro-Sector (Version 1.4.1 and earlier) UBB (Version 3.1.5 and earlier) Mitigation: Update your UBB-XG to Version 1.2.3 or later. Update your UDB-Pro/UDB-Pro-Sector to Version 1.4.2 or later. Update your UBB to Version 3.1.7 or later.

EPSS

Процентиль: 31%

0.00116

Низкий

8.8 High

CVSS3

Дефекты

CWE-77