[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fRGu_Hi92SGpmRP5bNByQL6ErbL8QPa_kMqCzDVKFnuw":3,"g5a-risk:CVE-2010-5330":151},{"success":4,"data":5,"meta":149},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":47,"epssPercentile":27,"epssTimeSeries":48,"severity":49,"affectedProducts":50,"affectedProductsCount":56,"references":57,"referencesCount":41,"weaknesses":80,"weaknessesCount":56,"isActivelyExploited":4,"cisaInfo":89,"otxData":27,"relatedBlogPosts":90,"seoMetadata":91,"configurations":116,"relatedVendorCves":133,"notableEvents":134},"CVE-2010-5330","What is CVE-2010-5330?","On certain Ubiquiti devices, Command Injection exists via a GET request to stainfo.cgi (aka Show AP info) because the ifname variable is not sanitized, as demonstrated by shell metacharacters. The fixed version is v4.0.1 for 802.11 ISP products, v5.3.5 for AirMax ISP products, and v5.4.5 for AirSync firmware. For example, Nanostation5 (Air OS) is affected.","On certain Ubiquiti devices, Command Injection exists via a GET request to stainfo.cgi (aka Show AP info) because the ifname variable is not sanitized, as de...","2019-06-11T21:29:00.35","2025-11-05T19:25:30.013",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":34,"CVSSMetricV2":35,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":29},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},[],[36],{"Source":17,"Type":18,"CVSSData":37,"BaseSeverity":43,"ExploitabilityScore":44,"ImpactScore":45,"ACInsufInfo":46,"ObtainAllPrivilege":46,"ObtainUserPrivilege":46,"ObtainOtherPrivilege":46,"UserInteractionRequired":46},{"Version":38,"VectorString":39,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":40,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":41,"BaseSeverity":42,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",5,"","MEDIUM",10,2.9,false,0.39362,[47,47,47,47,47,47,47],"Critical",[51],{"vendor":52,"product":53,"version":54,"criteria":55,"vulnerable":4},"ui","airos","*","cpe:2.3:o:ui:airos:*:*:*:*:*:*:*:*",1,[58,65,71,73,75],{"url":59,"source":60,"tags":61},"https:\u002F\u002Fcommunity.ubnt.com\u002Ft5\u002FairMAX-General-Discussion\u002FAirOS-Security-Exploit-Updated-Firmware\u002Ftd-p\u002F212974","Ubnt",[62,63,64],"Issue Tracking","Patch","Vendor Advisory",{"url":66,"source":67,"tags":68},"https:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F14146","Exploit-db",[69,70],"Third Party Advisory","VDB Entry",{"url":59,"source":60,"tags":72},[62,63,64],{"url":66,"source":67,"tags":74},[69,70],{"url":76,"source":77,"tags":78},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2010-5330","CISA",[79],"US Government Resource",[81],{"id":82,"name":83,"description":84,"extendedDescription":85,"status":86,"abstraction":87,"structure":88},"CWE-77","Improper Neutralization of Special Elements used in a Command ('Command Injection')","The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.","Many protocols and products have their own custom command language. While OS or shell command strings are frequently discovered and targeted, developers may not realize that these other command languages might also be vulnerable to attacks.","Draft","Class","Simple",{"shortDescription":42,"requiredAction":42,"vulnerabilityName":42,"dateAdded":27},[],{"title":92,"metaDescription":93,"keywords":94,"canonicalUrl":95,"structuredData":96},"What is CVE-2010-5330? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2010-5330, a critical severity cyber security vulnerability from 2019. High exploit probability (39.4%). On certain Ubiquiti de...","CVE-2010-5330, CVE-2010-5330 vulnerability, CVE-2010-5330 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, ui security, airos vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2010-5330",{"@context":97,"@type":98,"headline":92,"description":93,"datePublished":10,"dateModified":11,"author":99,"publisher":103,"about":107,"mainEntityOfPage":111,"articleSection":114,"keywords":115},"https:\u002F\u002Fschema.org","TechArticle",{"@type":100,"name":101,"url":102},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":100,"name":101,"url":102,"logo":104},{"@type":105,"url":106},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":108,"name":6,"description":109,"additionalType":110},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":112,"@id":113},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2010-5330","Cybersecurity","CVE-2010-5330, CVE-2010-5330 vulnerability, CVE-2010-5330 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[117],{"Operator":27,"Negate":27,"Nodes":118},[119],{"Operator":120,"Negate":46,"CPEMatch":121},"OR",[122,125,129],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":123,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":124,"VersionEndIncluding":27},"4115A638-71CD-4EB8-9522-CDA8552959B6","4.0.1",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":126,"VersionStartExcluding":27,"VersionStartIncluding":127,"VersionEndExcluding":128,"VersionEndIncluding":27},"73EC763B-DF91-4062-868A-2863619C2C01","4.0.2","5.3.5",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":130,"VersionStartExcluding":27,"VersionStartIncluding":131,"VersionEndExcluding":132,"VersionEndIncluding":27},"133DCE2B-EE25-4BFF-A290-1D4A803DEC3E","5.3.6","5.4.5",[],[135,142],{"id":136,"eventType":137,"eventTime":138,"details":139,"label":140,"color":141},"0d5da6fb-ca7f-4547-9cd4-da8aae49c2b5","LOW_EPSS_DELTA","2025-11-07T04:12:39.979655+00:00","Daily EPSS score decreased by 0.101 on 2023-12-30","EPSS Score Decreased","green",{"id":143,"eventType":144,"eventTime":145,"details":146,"label":147,"color":148},"23737395-9cb3-4b83-b2af-5188628b1f98","HIGH_EPSS_DELTA","2025-12-25T04:06:30.566337+00:00","Daily EPSS score increased by 0.125 on 2023-12-30","EPSS Score Increased","red",{"lastModified":11,"cacheTime":150,"version":38},1792358828672,{"score":152,"band":49,"action":153,"scoredAt":154},90,"Emergency patch","2026-10-16T06:46:19.251376+00:00"]