Lucene search

[email protected]CVE-2022-21143

HistoryFeb 18, 2022 - 6:15 p.m.

CVE-2022-21143

2022-02-1818:15:00

CWE-78

[email protected]

web.nvd.nist.gov

956

cve-2022-21143

information security

vulnerability

software

user input sanitization

arbitrary commands

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.3 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.002 Low

EPSS

Percentile

56.0%

JSON

MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 does not properly sanitize user input on several locations, which may allow an attacker to inject arbitrary commands.

CPENameOperatorVersion
airspan:mimosa_management_platformairspan mimosa management platformlt1.0.3
airspan:c6x_firmwareairspan c6x firmwarelt2.8.6.1
airspan:c5x_firmwareairspan c5x firmwarelt2.8.6.1
airspan:c5c_firmwareairspan c5c firmwarelt2.8.6.1
airspan:a5x_firmwareairspan a5x firmwarelt2.5.4.1

CPE	Name	Operator	Version
airspan:mimosa_management_platform	airspan mimosa management platform	lt	1.0.3
airspan:c6x_firmware	airspan c6x firmware	lt	2.8.6.1
airspan:c5x_firmware	airspan c5x firmware	lt	2.8.6.1
airspan:c5c_firmware	airspan c5c firmware	lt	2.8.6.1
airspan:a5x_firmware	airspan a5x firmware	lt	2.5.4.1

References

www.cisa.gov/uscert/ics/advisories/icsa-22-034-02

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.3 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.002 Low

EPSS

Percentile

56.0%

JSON

Related for CVE-2022-21143

prion1 cnvd1 ics1