AirOS Authentication Bypass Vulnerability

Release date: 2011-12-27
Updated on: 2011-12-28

Affected Systems:
Ubiquiti Networks AirOS 5.x
Ubiquiti Networks AirOS 4.x
Description:
--------------------------------------------------------------------------------
Bugtraq id: 51191

Ubiquiti Networks AirOS is the next generation of H.264 IP monitor management system.

Ubiquiti Networks AirOS has a security vulnerability in the access restriction function verification. by sending specially crafted requests to affected devices, malicious users can bypass certain security restrictions and access restricted pages without verification.

<* Source: vendor

Link: http://secunia.com/advisories/47375/
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Ubiquiti Networks
-----------------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.ubnt.com/nanostationm