Vulnerability Change Records for CVE-2015-9266

Change History

CPE Deprecation Remap 8/12/2021 12:43:11 PM

Action Type Old Value New Value
Changed CPE Configuration
OR
     *cpe:2.3:o:ubnt:airmax_ac_firmware:7.1.3:*:*:*:*:*:*:*
OR
     *cpe:2.3:o:ui:airmax_ac_firmware:7.1.3:*:*:*:*:*:*:*

CPE Deprecation Remap 8/12/2021 12:42:51 PM

Action Type Old Value New Value
Changed CPE Configuration
OR
     *cpe:2.3:h:ubnt:airmax_m_xm:-:*:*:*:*:*:*:*
OR
     *cpe:2.3:h:ui:airmax_m_xm:-:*:*:*:*:*:*:*

CPE Deprecation Remap 8/12/2021 12:42:44 PM

Action Type Old Value New Value
Changed CPE Configuration
OR
     *cpe:2.3:h:ubnt:airgateway:-:*:*:*:*:*:*:*
OR
     *cpe:2.3:h:ui:airgateway:-:*:*:*:*:*:*:*

CPE Deprecation Remap 8/12/2021 12:42:23 PM

Action Type Old Value New Value
Changed CPE Configuration
OR
     *cpe:2.3:o:ubnt:af5x_firmware:*:*:*:*:*:*:*:* versions from (excluding) 3.0.2.1
OR
     *cpe:2.3:o:ui:af5x_firmware:*:*:*:*:*:*:*:* versions from (excluding) 3.0.2.1

CPE Deprecation Remap 8/12/2021 12:42:31 PM

Action Type Old Value New Value
Changed CPE Configuration
OR
     *cpe:2.3:h:ubnt:airmax_m:-:*:*:*:*:*:*:*
OR
     *cpe:2.3:h:ui:airmax_m:-:*:*:*:*:*:*:*

CPE Deprecation Remap 8/12/2021 12:42:28 PM

Action Type Old Value New Value
Changed CPE Configuration
OR
     *cpe:2.3:o:ubnt:airfiber_af24hd_firmware:*:*:*:*:*:*:*:* versions from (excluding) 2.2.1
OR
     *cpe:2.3:o:ui:airfiber_af24hd_firmware:*:*:*:*:*:*:*:* versions from (excluding) 2.2.1

CPE Deprecation Remap 8/12/2021 12:42:46 PM

Action Type Old Value New Value
Changed CPE Configuration
OR
     *cpe:2.3:h:ubnt:af5x:-:*:*:*:*:*:*:*
OR
     *cpe:2.3:h:ui:af5x:-:*:*:*:*:*:*:*

CVE Modified by MITRE 10/09/2019 7:15:59 PM

Action Type Old Value New Value
Added CVSS V3

								
							
							
						
MITRE AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CPE Deprecation Remap 8/12/2021 12:43:08 PM

Action Type Old Value New Value
Changed CPE Configuration
OR
     *cpe:2.3:o:ubnt:airmax_m_xw_firmware:*:*:*:*:*:*:*:* versions from (excluding) 5.6.2
OR
     *cpe:2.3:o:ui:airmax_m_xw_firmware:*:*:*:*:*:*:*:* versions from (excluding) 5.6.2

CPE Deprecation Remap 8/12/2021 12:42:36 PM

Action Type Old Value New Value
Changed CPE Configuration
OR
     *cpe:2.3:o:ubnt:af5_firmware:*:*:*:*:*:*:*:* versions from (excluding) 2.2.1
OR
     *cpe:2.3:o:ui:af5_firmware:*:*:*:*:*:*:*:* versions from (excluding) 2.2.1

CPE Deprecation Remap 8/12/2021 12:43:03 PM

Action Type Old Value New Value
Changed CPE Configuration
OR
     *cpe:2.3:o:ubnt:airmax_m_xm_firmware:*:*:*:*:*:*:*:* versions from (excluding) 5.6.2
OR
     *cpe:2.3:o:ui:airmax_m_xm_firmware:*:*:*:*:*:*:*:* versions from (excluding) 5.6.2

CPE Deprecation Remap 8/12/2021 12:42:54 PM

Action Type Old Value New Value
Changed CPE Configuration
OR
     *cpe:2.3:h:ubnt:airmax_ac:-:*:*:*:*:*:*:*
OR
     *cpe:2.3:h:ui:airmax_ac:-:*:*:*:*:*:*:*

CPE Deprecation Remap 8/12/2021 12:42:49 PM

Action Type Old Value New Value
Changed CPE Configuration
OR
     *cpe:2.3:h:ubnt:airfiber_af24hd:-:*:*:*:*:*:*:*
OR
     *cpe:2.3:h:ui:airfiber_af24hd:-:*:*:*:*:*:*:*

CPE Deprecation Remap 8/12/2021 12:43:05 PM

Action Type Old Value New Value
Changed CPE Configuration
OR
     *cpe:2.3:o:ubnt:airmax_m_ti_firmware:*:*:*:*:*:*:*:* versions from (excluding) 5.6.2
OR
     *cpe:2.3:o:ui:airmax_m_ti_firmware:*:*:*:*:*:*:*:* versions from (excluding) 5.6.2

CPE Deprecation Remap 8/12/2021 12:43:00 PM

Action Type Old Value New Value
Changed CPE Configuration
OR
     *cpe:2.3:h:ubnt:airmax_m_xw:-:*:*:*:*:*:*:*
OR
     *cpe:2.3:h:ui:airmax_m_xw:-:*:*:*:*:*:*:*

Initial Analysis 1/25/2019 4:53:14 PM

Action Type Old Value New Value
Added CPE Configuration

								
							
							
						
AND
     OR
          *cpe:2.3:o:ubnt:af5_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.2.1
     OR
          cpe:2.3:h:ubnt:af5:-:*:*:*:*:*:*:*
Added CPE Configuration

								
							
							
						
AND
     OR
          *cpe:2.3:o:ubnt:af5x_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 3.0.2.1
     OR
          cpe:2.3:h:ubnt:af5x:-:*:*:*:*:*:*:*
Added CPE Configuration

								
							
							
						
AND
     OR
          *cpe:2.3:o:ubnt:airfiber_af24_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.2.1
     OR
          cpe:2.3:h:ubnt:airfiber_af24:-:*:*:*:*:*:*:*
Added CPE Configuration

								
							
							
						
AND
     OR
          *cpe:2.3:o:ubnt:airfiber_af24hd_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2.2.1
     OR
          cpe:2.3:h:ubnt:airfiber_af24hd:-:*:*:*:*:*:*:*
Added CPE Configuration

								
							
							
						
AND
     OR
          *cpe:2.3:o:ubnt:airgateway_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 1.15
     OR
          cpe:2.3:h:ubnt:airgateway:-:*:*:*:*:*:*:*
Added CPE Configuration

								
							
							
						
AND
     OR
          *cpe:2.3:o:ubnt:airmax_ac_firmware:7.1.3:*:*:*:*:*:*:*
     OR
          cpe:2.3:h:ubnt:airmax_ac:-:*:*:*:*:*:*:*
Added CPE Configuration

								
							
							
						
AND
     OR
          *cpe:2.3:o:ubnt:airmax_m_ti_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 5.6.2
     OR
          cpe:2.3:h:ubnt:airmax_m_ti:-:*:*:*:*:*:*:*
Added CPE Configuration

								
							
							
						
AND
     OR
          *cpe:2.3:o:ubnt:airmax_m_xm_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 5.6.2
     OR
          cpe:2.3:h:ubnt:airmax_m_xm:-:*:*:*:*:*:*:*
Added CPE Configuration

								
							
							
						
AND
     OR
          *cpe:2.3:o:ubnt:airmax_m_xw_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 5.6.2
     OR
          cpe:2.3:h:ubnt:airmax_m_xw:-:*:*:*:*:*:*:*
Added CPE Configuration

								
							
							
						
AND
     OR
          *cpe:2.3:o:ubnt:airos_4_xs2:*:*:*:*:*:*:*:* versions up to (excluding) 4.0.4
          *cpe:2.3:o:ubnt:airos_4_xs5:*:*:*:*:*:*:*:* versions up to (excluding) 4.0.4
     OR
          cpe:2.3:h:ubnt:airmax_ac:-:*:*:*:*:*:*:*
          cpe:2.3:h:ubnt:airmax_m:-:*:*:*:*:*:*:*
Added CPE Configuration

								
							
							
						
AND
     OR
          *cpe:2.3:o:ubnt:edgeswitch_xp_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 1.3.2
     OR
          cpe:2.3:h:ubnt:edgeswitch_xp:-:*:*:*:*:*:*:*
Added CVSS V2

								
							
							
						
(AV:N/AC:L/Au:N/C:C/I:C/A:C)
Added CVSS V3

								
							
							
						
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Added CWE

								
							
							
						
CWE-22
Changed Reference Type
https://community.ubnt.com/t5/airMAX-General-Discussion/Virus-attack-URGENT-UBNT/td-p/1562940 No Types Assigned
https://community.ubnt.com/t5/airMAX-General-Discussion/Virus-attack-URGENT-UBNT/td-p/1562940 Vendor Advisory
Changed Reference Type
https://community.ubnt.com/t5/airMAX-Updates-Blog/Important-Security-Notice-and-airOS-5-6-5-Release/ba-p/1565949 No Types Assigned
https://community.ubnt.com/t5/airMAX-Updates-Blog/Important-Security-Notice-and-airOS-5-6-5-Release/ba-p/1565949 Vendor Advisory
Changed Reference Type
https://community.ubnt.com/t5/airMAX-Updates-Blog/Security-Release-for-airMAX-TOUGHSwitch-and-airGateway-Released/ba-p/1300494 No Types Assigned
https://community.ubnt.com/t5/airMAX-Updates-Blog/Security-Release-for-airMAX-TOUGHSwitch-and-airGateway-Released/ba-p/1300494 Patch, Vendor Advisory
Changed Reference Type
https://hackerone.com/reports/73480 No Types Assigned
https://hackerone.com/reports/73480 Issue Tracking, Third Party Advisory
Changed Reference Type
https://www.exploit-db.com/exploits/39701/ No Types Assigned
https://www.exploit-db.com/exploits/39701/ Exploit, Third Party Advisory, VDB Entry
Changed Reference Type
https://www.exploit-db.com/exploits/39853/ No Types Assigned
https://www.exploit-db.com/exploits/39853/ Exploit, Third Party Advisory, VDB Entry
Changed Reference Type
https://www.rapid7.com/db/modules/exploit/linux/ssh/ubiquiti_airos_file_upload No Types Assigned
https://www.rapid7.com/db/modules/exploit/linux/ssh/ubiquiti_airos_file_upload Exploit, Third Party Advisory

CPE Deprecation Remap 8/12/2021 12:42:39 PM

Action Type Old Value New Value
Changed CPE Configuration
OR
     *cpe:2.3:h:ubnt:edgeswitch_xp:-:*:*:*:*:*:*:*
OR
     *cpe:2.3:h:ui:edgeswitch_xp:-:*:*:*:*:*:*:*

CPE Deprecation Remap 8/12/2021 12:42:58 PM

Action Type Old Value New Value
Changed CPE Configuration
OR
     *cpe:2.3:h:ubnt:airmax_m_ti:-:*:*:*:*:*:*:*
OR
     *cpe:2.3:h:ui:airmax_m_ti:-:*:*:*:*:*:*:*

CPE Deprecation Remap 8/12/2021 12:42:20 PM

Action Type Old Value New Value
Changed CPE Configuration
OR
     *cpe:2.3:o:ubnt:airfiber_af24_firmware:*:*:*:*:*:*:*:* versions from (excluding) 2.2.1
OR
     *cpe:2.3:o:ui:airfiber_af24_firmware:*:*:*:*:*:*:*:* versions from (excluding) 2.2.1

CPE Deprecation Remap 8/12/2021 12:42:41 PM

Action Type Old Value New Value
Changed CPE Configuration
OR
     *cpe:2.3:h:ubnt:airfiber_af24:-:*:*:*:*:*:*:*
OR
     *cpe:2.3:h:ui:airfiber_af24:-:*:*:*:*:*:*:*

CPE Deprecation Remap 8/12/2021 12:42:26 PM

Action Type Old Value New Value
Changed CPE Configuration
OR
     *cpe:2.3:o:ubnt:airgateway_firmware:*:*:*:*:*:*:*:* versions from (excluding) 1.15
OR
     *cpe:2.3:o:ui:airgateway_firmware:*:*:*:*:*:*:*:* versions from (excluding) 1.15

CPE Deprecation Remap 8/12/2021 12:42:33 PM

Action Type Old Value New Value
Changed CPE Configuration
OR
     *cpe:2.3:h:ubnt:af5:-:*:*:*:*:*:*:*
OR
     *cpe:2.3:h:ui:af5:-:*:*:*:*:*:*:*