CVE-2022-21143

MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 does not properly sanitize user input on several locations, which may allow an attacker to inject arbitrary commands.
References
Link Resource
https://www.cisa.gov/uscert/ics/advisories/icsa-22-034-02 Third Party Advisory US Government Resource
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:airspan:mimosa_management_platform:*:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:airspan:c6x_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:airspan:c6x:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:airspan:c5x_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:airspan:c5x:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:airspan:c5c_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:airspan:c5c:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:airspan:a5x_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:airspan:a5x:-:*:*:*:*:*:*:*

Information

Published : 2022-02-18 10:15

Updated : 2022-02-25 20:52


NVD link : CVE-2022-21143

Mitre link : CVE-2022-21143


JSON object : View

CWE
CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Advertisement

dedicated server usa

Products Affected

airspan

  • mimosa_management_platform
  • a5x
  • a5x_firmware
  • c5c
  • c5x_firmware
  • c5x
  • c6x
  • c6x_firmware
  • c5c_firmware