CVE-2022-38789
Critical
Description
An issue was discovered in Airties Smart Wi-Fi before 2020-08-04. It allows attackers to change the main/guest SSID and the PSK to arbitrary values, and map the LAN, because of Insecure Direct Object Reference.
SeverityCritical
CVSS9.1
Exploit probability—
ProductAirties Air 4920 Firmware
PublishedSep 15, 2022
First seenSep 15, 2022
How to fix
Update
- airties air_4920_firmware2020-08-04 or later
- airties air_4921_firmware2020-08-04 or later
- airties air_4971_firmware2020-08-04 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| airties air_4920_firmware | v < 2020-08-04 | 2020-08-04 |
| airties air_4921_firmware | v < 2020-08-04 | 2020-08-04 |
| airties air_4971_firmware | v < 2020-08-04 | 2020-08-04 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.