CVE-2022-21196

MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 does not perform proper authorization and authentication checks on multiple API routes. An attacker may gain access to these API routes and achieve remo...

CVE-2022-21196 Airspan Networks Mimosa Improper Authorization

MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 does not perform proper authorization and authentication checks on multiple API routes. An attacker may gain access to these API routes and achieve remo...

CVE-2022-21196

CVE-2022-21196: Improper authorization in Airspan/Mimosa MMP stack allows access to multiple API routes, enabling remote code execution, denial of service, and information disclosure. Affected versions are MMP before 1.0.3, PTP C-series before 2.8.6.1, and PTMP C-series/A5x before 2.5.4.1. Techni...