Read the docs

Airspan

Records21All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical8CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9

Exploited now

Airspan records in CISA KEV

No Airspan vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
A5x Firmware 7 records MEDIUM Airvelocity 1500 Firmware 7 records MEDIUM C5c Firmware 7 records MEDIUM C5x Firmware 7 records MEDIUM C6x Firmware 7 records MEDIUM Mimosa Management Platform 7 records MEDIUM Airspot 5410 Firmware 4 records HIGH Base Station Distribution Unit 1 record LOW

Records

7 records in C5c Firmware · all components

TI-2022-05592 CVE-2022-21196 · GHSA-vqjc-h5m3-4q6j

Airspan Networks Mimosa Improper Authorization

Priority MEDIUM 55

MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 does not perform proper authorization and authentication checks on multiple…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.03663 Published 2022-02-18 Fixed in v1.0.3, v2.8.6.1 +1 CWE-285
TI-2022-05544 CVE-2022-21141 · GHSA-2r55-58m5-vgxw

Airspan Networks Mimosa Incorrect Authorization

Priority MEDIUM 55

MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 does not perform proper authorization checks on multiple API functions.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.0316 Published 2022-02-18 Fixed in v1.0.3, v2.8.6.1 +1 CWE-863
TI-2022-05608 CVE-2022-21215 · GHSA-hqrh-5ffw-2jfp

Airspan Networks Mimosa Server-Side Request Forgery (SSRF)

Priority MEDIUM 52

This vulnerability could allow an attacker to force the server to create and execute a web request granting access to backend APIs that are only accessible to the Mimosa MMP server, or request pages that could perform so…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01412 Published 2022-02-18 Fixed in v1.0.3, v2.8.6.1 +1 CWE-918
TI-2022-05546 CVE-2022-21143 · GHSA-6mv8-8f4g-29gc

Airspan Networks Mimosa OS Command Injection

Priority MEDIUM 50

MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 does not properly sanitize user input on several locations, which may allow…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01163 Published 2022-02-18 Fixed in v1.0.3, v2.8.6.1 +1 CWE-78
TI-2022-05575 CVE-2022-21176 · GHSA-9c9m-v76w-mp48

Airspan Networks Mimosa SQL Injection

Priority MEDIUM 45

MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 does not properly sanitize user input, which may allow an attacker to perfo…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01053 Published 2022-02-18 Fixed in v1.0.3, v2.8.6.1 +1 CWE-89
TI-2022-00081 CVE-2022-0138 · GHSA-r92v-ww59-8xpg

Airspan Networks Mimosa Deserialization of Untrusted Data

Priority MEDIUM 41

MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 has a deserialization function that does not validate or check the data, al…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00986 Published 2022-02-18 Fixed in v1.0.3, v2.8.6.1 +1 CWE-502
TI-2022-06172 CVE-2022-21800 · GHSA-45m8-h637-23mm

Airspan Networks Mimosa Use of a Broken or Risky Cryptographic Algorithm

Priority LOW 29

MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 uses the MD5 algorithm to hash the passwords before storing them but does n…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00521 Published 2022-02-18 Fixed in v1.0.3, v2.8.6.1 +1 CWE-327
Open these records in search →