CVE-2017-9136

Mimosa Client Radios before 2.2.3 are affected. A vulnerability in the device web interface allows an attacker to exploit an unsanitized GET parameter to download arbitrary files from the device as root, enabling viewing of administrator passwords (MD5-hashed, unsalted), plaintext PSK, and the de...