Positive Technologies has reported some vulnerabilities in AirMagnet Enterprise, which can be exploited by malicious people to conduct man-in-the-middle, cross-site scripting, and script insertion attacks.

1) Input included in the 404 error page of the Smart Sensor Edge Sensor is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

2) The user name of unsuccessful logins is not properly sanitised before being used in the error log viewer of the Smart Sensor Edge Sensor. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site when malicious data is viewed.

3) The web interfaces of the AirMagnet Enterprise Server, AirMagnet Enterprise Console, and AirMagnet Enterprise Remote Sensor Console return scanned SSIDs to the user without properly sanitising them. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

4) The AirMagnet Enterprise Console does not properly verify the certificated of the AirMagnet Enterprise Server. This can be exploited to e.g. conduct man-in-the-middle attacks.

Solution
Update to AirMagnet Enterprise version 7.5 build 6307 or apply patches.

Provided and/or discovered by
Positive Technologies

Changelog
Further details available in Customer Area

Deep Links
Links available in Customer Area