Ubiquiti Inc. · Report #73480
Arbritrary file Upload on AirMax
Validstatus
21upvotes
13 Feb 2016disclosed
Summary
It's possible to upload arbitrary files to airMAX devices via HTTP because of a vulnerability in the airOS web server.
An attacker can bypass the device's authentication mechanisms by exploiting this vulnerability.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.