CVE-2022-21215

This vulnerability could allow an attacker to force the server to create and execute a web request granting access to backend APIs that are only accessible to the Mimosa MMP server, or request pages that could perform some actions themselves. The attacker could force the server into accessing routes on those cloud-hosting platforms, accessing secret keys, changing configurations, etc. Affecting MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1.

• Airspan A5x

  HW
  Airspan
  wszystkie wersje

• Airspan A5x Firmware

  OS
  Airspan
  < 2.5.4.1

• Airspan C5c

  HW
  Airspan
  wszystkie wersje

• Airspan C5c Firmware

  OS
  Airspan
  < 2.8.6.1

• Airspan C5x

  HW
  Airspan
  wszystkie wersje

• Airspan C5x Firmware

  OS
  Airspan
  < 2.8.6.1

• Airspan C6x

  HW
  Airspan
  wszystkie wersje

• Airspan C6x Firmware

  OS
  Airspan
  < 2.8.6.1

• Airspan Mimosa Management Platform

  APP
  Airspan
  < 1.0.3