Medium severity6.1NVD Advisory· Published May 26, 2020· Updated Jun 17, 2026
CVE-2020-8170
CVE-2020-8170
Description
We have recently released new version of AirMax AirOS firmware v6.3.0 for TI, XW and XM boards that fixes vulnerabilities found on AirMax AirOS v6.2.0 and prior TI, XW and XM boards, according to the description below:Multiple end-points with parameters vulnerable to reflected cross site scripting (XSS), allowing attackers to abuse the user' session information and/or account takeover of the admin user.Mitigation:Update to the latest AirMax AirOS firmware version available at the AirMax download page.
Affected products
3- AirMax/AirMax AirOS firmwaredescription
- Range: <=6.2.0
Patches
Vulnerability mechanics
References
3- community.ui.com/releases/Security-advisory-bulletin-010-010/36a8448a-7dbf-4d30-bb54-398c44591dd4nvdVendor Advisory
- community.ui.com/releases/airMAX-M-v6-3-0/c8d5dec9-4030-4d7e-b23f-6a5b35ed3d83nvdVendor Advisory
- www.ui.com/download/airmax-mnvdRelease NotesThird Party Advisory
News mentions
0No linked articles in our index yet.