CVE-2022-44565

MEDIUM

UI airMAX AC <8.7.11, airFiber 60/LR <2.6.2, airFiber 60 XG/HD <1.0.0, airFiber GBE <1.4.1 - Information Disclosure

Title source: llm
STIX 2.1

Description

An improper access validation vulnerability exists in airMAX AC <8.7.11, airFiber 60/LR <2.6.2, airFiber 60 XG/HD <v1.0.0 and airFiber GBE <1.4.1 that allows a malicious actor to retrieve status and usage data from the UISP device.

References (1)

Core 1

Scores

CVSS v3 5.3
EPSS 0.0043
EPSS Percentile 34.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-284
Status published
Products (6)
ui/airfiber_60-hd_firmware < 1.0.0
ui/airfiber_60-lr_firmware < 2.6.2
ui/airfiber_60-xg_firmware < 1.0.0
ui/airfiber_60_firmware < 2.6.2
ui/airfiber_gigabeam_firmware < 1.4.1
ui/airmax_ac_firmware < 8.7.11
Published Dec 23, 2022
Tracked Since Feb 18, 2026