Critical

DATE	CVE	VULNERABILITY TITLE	RISK
2020-05-26	CVE-2020-8171	OS Command Injection vulnerability in UI Airos We have recently released new version of AirMax AirOS firmware v6.3.0 for TI, XW and XM boards that fixes vulnerabilities found on AirMax AirOS v6.2.0 and prior TI, XW and XM boards, according to the description below:There are certain end-points containing functionalities that are vulnerable to command injection. network low complexity ui CWE-78 critical	9.8
2019-06-11	CVE-2010-5330	Command Injection vulnerability in UI Airos On certain Ubiquiti devices, Command Injection exists via a GET request to stainfo.cgi (aka Show AP info) because the ifname variable is not sanitized, as demonstrated by shell metacharacters. network low complexity ui CWE-77 critical	9.8