CVE-2017-0938: UI AirOS

High severity, CVSS 7.5. EPSS: 21% chance of exploitation in the next 30 days.

Denial of Service attack in airMAX < 8.3.2 , airMAX < 6.0.7 and EdgeMAX < 1.9.7 allow attackers to use the Discovery Protocol in amplification attacks.

Affected products

• UI AirOS: before 6.0.7 (fixed in 6.0.7); from 6.0.7, before 8.3.2 (fixed in 8.3.2)
• UI Edgemax Firmware: before 1.9.7 (fixed in 1.9.7)

Published 2019-02-12. Last modified 2026-06-17.