Affected Devices

EdgeRouters 2.0.9-hotfix.6 and earlier

AirCube firmware version 2.8.8 and earlier

• Ubiquiti Advisory:

   

  • https://community.ui.com/releases/Security-Advisory-Bulletin-033-033/17f7c7c0-830b-4625-a2ee-e90e514e7b0f
• Ubiquiti EdgeRouter discussion with download links:

   

  • https://community.ui.com/releases/EdgeMAX-EdgeRouter-v2-0-9-hotfix-7/2693d34c-f878-45d3-90af-32da2b4895a2
• Ubiquiti AirCube discussion with download links:

   

  • https://community.ui.com/releases/airCube-2-8-9/33046b1b-f903-4492-b67b-e01096b05109
• Disclosure / PoC:

   

  • https://ssd-disclosure.com/ssd-advisory-edgerouters-and-aircube-miniupnpd-heap-overflow/?twclid=25cngr7fbt4qm0vwmy2zze5xxp

Worth noting this could become a wider issue “It is likely that other products relying either directly on upstream MiniUPnPd, or on router distribution such as OpenWrt, VyOS or DD-WRT still ship today with vulnerable MiniUPnPd,” SSD Secure Disclosure notes.