Attacks from within Wi‑Fi coverage can exploit a flaw in the airMAX Wireless Protocol, allowing a malicious actor to inject commands that are executed with device privileges. The weakness, a path‑to‑command injection (CWE‑77), opens the possibility for full control over the device, enabling data exfiltration, network disruption, or use as a pivot for further attacks.

Ubiquiti Inc’s UBB‑XG, UBB, and UDB‑Pro/UDB‑Pro‑Sector devices are affected. Firmware versions up to UBB‑XG 1.2.2, UDB‑Pro/UDB‑Pro‑Sector 1.4.1, and UBB 3.1.5 are vulnerable. Applying any later firmware (UBB‑XG 1.2.3+, UDB‑Pro/UDB‑Pro‑Sector 1.4.2+, UBB 3.1.7+) removes the flaw.

The vulnerability scores a CVSS of 8.8, indicating high severity, while the EPSS score of less than 1% suggests low current exploitation likelihood. Because the flaw is triggered by malicious traffic over the airMAX protocol, an attacker must be within wireless range and able to craft protocol packets. The risk is mitigated if the device is isolated from the external network or configured to minimize exposure.