A malicious actor who lures an authenticated user to a malicious page could exploit a Cross‑Site Request Forgery (CSRF) vulnerability found in airMAX M devices to make unauthorized changes and execute a Denial of Service (DoS) attack on the device. This CSRF flaw allows the attacker to bypass token validation and perform any action that the authenticated user can, including altering critical settings and triggering commands that halt or reset the device.

The affected devices are the Ubiquiti airMAX M series; no specific firmware or hardware version numbers are listed in the advisory, so any airMAX M appliance that has not applied the latest update is potentially vulnerable.

The CVSS score of 7.1 indicates a high severity, and no EPSS score is available. The vulnerability is not listed in the CISA KEV catalog. Because the flaw requires an authenticated user to be lured to a malicious page, the likelihood of exploitation hinges on social engineering and the presence of a web‑based administrative interface. The attack vector is inferred to be the web GUI, which is typically exposed on the local network or over the public internet. While it is not a remote code execution flaw, the ability to force an administrative user to perform unauthorized changes presents a significant risk to device availability and configuration integrity.