CVE:CVE-2015-9266
CNNVD:CNNVD-201809-213
Ubiquiti airMAX AC等都是美国优比快（Ubiquiti Networks）公司的产品。Ubiquiti airMAX AC是一款无线接入点设备。airGateway是一款网关设备。
多款Ubiquiti产品中的Web管理接口存在目录遍历漏洞。攻击者可利用该漏洞上传并写入任意文件，获取root权限。以下产品和版本受到影响：Ubiquiti airMAX AC 7.1.3之前版本；airMAX M（包括airRouter）5.6.2 XM/XW/TI之前版本，5.5.11 XM/TI之前版本，5.5.10u2 XW之前版本；airGateway 1.1.5之前版本；airFiber AF24/AF24HD 2.2.1之前版本，AF5x 3.0.2.1之前版本，AF5 2.2.1之前版本；airOS 4 XS2/XS5 4.0.4之前版本；EdgeSwitch XP 1.3.2之前版本。
solution:Upgrade ui airmax_ac_firmware to a higher version than 7.1.3,and avoid the version 7.1.3; Upgrade ui airmax_m_xm_firmware to a higher version than 5.6.2,and avoid the version (,5.6.2); Upgrade ui airmax_m_xw_firmware to a higher version than 5.6.2,and avoid the version (,5.6.2); Upgrade ui airmax_m_ti_firmware to a higher version than 5.6.2,and avoid the version (,5.6.2); Upgrade ui airgateway_firmware to a higher version than 1.15,and avoid the version (,1.15); Upgrade ui airfiber_af24_firmware to a higher version than 2.2.1,and avoid the version (,2.2.1); Upgrade ui airfiber_af24hd_firmware to a higher version than 2.2.1,and avoid the version (,2.2.1); Upgrade ui af5x_firmware to a higher version than 3.0.2.1,and avoid the version (,3.0.2.1); Upgrade ui af5_firmware to a higher version than 2.2.1,and avoid the version (,2.2.1); Upgrade ubnt airos_4_xs2 to a higher version than 4.0.4,and avoid the version (,4.0.4); Upgrade ubnt airos_4_xs5 to a higher version than 4.0.4,and avoid the version (,4.0.4); Upgrade ubnt edgeswitch_xp_firmware to a higher version than 1.3.2,and avoid the version (,1.3.2)