{"id":"CVE-2024-44540","aliases":["EUVD-2024-41039","GHSA-qwh7-hq65-xwrr"],"status":"published","title":"Ubiquiti AirMax firmware version firmware version 8 allows attackers with physical access to gain...","description":"Ubiquiti AirMax firmware version firmware version 8 allows attackers with physical access to gain a privileged command shell via the UART Debugging Port.","severity":{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-08","score":0.00216,"percentile":0.1218,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-269"],"published":"2024-09-23T00:00:00Z","modified":"2026-06-17T07:52:51Z","products":[{"vendor":"ubiquiti","product":"airmax_firmware"}],"references":[{"url":"https://www.linkedin.com/pulse/bypass-de-login-en-airmax-ubiquiti-usando-uart-paso-tillerias-ley-hk1gf/"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-44540"},{"url":"https://www.linkedin.com/pulse/bypass-de-login-en-airmax-ubiquiti-usando-uart-paso-tillerias-ley-hk1gf"},{"url":"https://github.com/advisories/GHSA-qwh7-hq65-xwrr"}],"sources":{"cve":[{"id":"CVE-2024-44540","description":"Ubiquiti AirMax firmware version firmware version 8 allows attackers with physical access to gain a privileged command shell via the UART Debugging Port.","status":"published","published":"2024-09-23T00:00:00Z","modified":"2024-09-23T20:47:41.24Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"adp"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T14:34:06.48311Z"}],"euvd":[{"id":"EUVD-2024-41039","description":"Ubiquiti AirMax firmware version firmware version 8 allows attackers with physical access to gain a privileged command shell via the UART Debugging Port.","status":"published","published":"2024-09-23T00:00:00Z","modified":"2024-09-23T20:47:41Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-03T00:28:16.146478Z"}],"ghsa":[{"id":"GHSA-qwh7-hq65-xwrr","title":"Ubiquiti AirMax firmware version firmware version 8 allows attackers with physical access to gain...","description":"Ubiquiti AirMax firmware version firmware version 8 allows attackers with physical access to gain a privileged command shell via the UART Debugging Port.","status":"published","published":"2024-09-23T21:30:47Z","modified":"2024-09-24T00:32:35Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T14:58:19.788112Z"}],"nvd":[{"id":"CVE-2024-44540","description":"Ubiquiti AirMax firmware version firmware version 8 allows attackers with physical access to gain a privileged command shell via the UART Debugging Port.","status":"published","published":"2024-09-23T20:15:05.347Z","modified":"2026-06-17T07:52:51.627Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T14:10:27.456509Z"}]}}