Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

7 records

Vendor: Airspan Component: Mimosa Management Platform Clear all filters
TI-2022-05544 CVE-2022-21141 · GHSA-2r55-58m5-vgxw

Airspan Networks Mimosa Incorrect Authorization

Priority MEDIUM 55

MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 does not perform proper authorization checks on multiple API functions.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.0316 Published 2022-02-18 Fixed in v1.0.3, v2.8.6.1 +1 CWE-863
TI-2022-05575 CVE-2022-21176 · GHSA-9c9m-v76w-mp48

Airspan Networks Mimosa SQL Injection

Priority MEDIUM 45

MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 does not properly sanitize user input, which may allow an attacker to perfo…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01053 Published 2022-02-18 Fixed in v1.0.3, v2.8.6.1 +1 CWE-89
TI-2022-05546 CVE-2022-21143 · GHSA-6mv8-8f4g-29gc

Airspan Networks Mimosa OS Command Injection

Priority MEDIUM 50

MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 does not properly sanitize user input on several locations, which may allow…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01163 Published 2022-02-18 Fixed in v1.0.3, v2.8.6.1 +1 CWE-78
TI-2022-06172 CVE-2022-21800 · GHSA-45m8-h637-23mm

Airspan Networks Mimosa Use of a Broken or Risky Cryptographic Algorithm

Priority LOW 29

MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 uses the MD5 algorithm to hash the passwords before storing them but does n…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00521 Published 2022-02-18 Fixed in v1.0.3, v2.8.6.1 +1 CWE-327
TI-2022-00081 CVE-2022-0138 · GHSA-r92v-ww59-8xpg

Airspan Networks Mimosa Deserialization of Untrusted Data

Priority MEDIUM 41

MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 has a deserialization function that does not validate or check the data, al…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00986 Published 2022-02-18 Fixed in v1.0.3, v2.8.6.1 +1 CWE-502
TI-2022-05592 CVE-2022-21196 · GHSA-vqjc-h5m3-4q6j

Airspan Networks Mimosa Improper Authorization

Priority MEDIUM 55

MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 does not perform proper authorization and authentication checks on multiple…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.03663 Published 2022-02-18 Fixed in v1.0.3, v2.8.6.1 +1 CWE-285
TI-2022-05608 CVE-2022-21215 · GHSA-hqrh-5ffw-2jfp

Airspan Networks Mimosa Server-Side Request Forgery (SSRF)

Priority MEDIUM 52

This vulnerability could allow an attacker to force the server to create and execute a web request granting access to backend APIs that are only accessible to the Mimosa MMP server, or request pages that could perform so…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01412 Published 2022-02-18 Fixed in v1.0.3, v2.8.6.1 +1 CWE-918