MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 has a deserialization function that does not validate or check the data, allowing arbitrary classes to be created.
CPE | Name | Operator | Version |
---|---|---|---|
a5x_firmware | lt | 2.5.4.1 | |
c5c_firmware | lt | 2.8.6.1 | |
c5x_firmware | lt | 2.8.6.1 | |
c6x_firmware | lt | 2.8.6.1 | |
mimosa_management_platform | lt | 1.0.3 |