Vulnerability Description
An improper access validation vulnerability exists in airMAX AC <8.7.11, airFiber 60/LR <2.6.2, airFiber 60 XG/HD <v1.0.0 and airFiber GBE <1.4.1 that allows a malicious actor to retrieve status and usage data from the UISP device.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ui | Airfiber Gigabeam Firmware | < 1.4.1 |
| Ui | Airfiber Gigabeam | - |
| Ui | Airfiber 60-Xg Firmware | < 1.0.0 |
| Ui | Airfiber 60-Xg | - |
| Ui | Airfiber 60-Hd Firmware | < 1.0.0 |
| Ui | Airfiber 60-Hd | - |
| Ui | Airfiber 60-Lr Firmware | < 2.6.2 |
| Ui | Airfiber 60-Lr | - |
| Ui | Airmax Ac Firmware | < 8.7.11 |
| Ui | Airmax Ac | - |
| Ui | Airfiber 60 Firmware | < 2.6.2 |
| Ui | Airfiber 60 | - |
Related Weaknesses (CWE)
References
- https://community.ui.com/releases/Security-Advisory-Bulletin-027-027/123e4577-9fPatchVendor Advisory
- https://community.ui.com/releases/Security-Advisory-Bulletin-027-027/123e4577-9fPatchVendor Advisory
FAQ
What is CVE-2022-44565?
CVE-2022-44565 is a vulnerability with a CVSS score of 5.3 (MEDIUM). An improper access validation vulnerability exists in airMAX AC <8.7.11, airFiber 60/LR <2.6.2, airFiber 60 XG/HD <v1.0.0 and airFiber GBE <1.4.1 that allows a malicious actor to retrieve status and u...
How severe is CVE-2022-44565?
CVE-2022-44565 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-44565?
Check the references section above for vendor advisories and patch information. Affected products include: Ui Airfiber Gigabeam Firmware, Ui Airfiber Gigabeam, Ui Airfiber 60-Xg Firmware, Ui Airfiber 60-Xg, Ui Airfiber 60-Hd Firmware.