CVE-2022-21143 HIGH

CVE-2022-21143: Airspan Networks Mimosa OS Command Injection

Vendor Airspan Networks
Product MMP
Weakness CWE-78
Published February 18, 2022
Last update April 16, 2025
View on NVD All CVEs

CVSS base score

7.5/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

What the vulnerability does

01Description

MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 does not properly sanitize user input on several locations, which may allow an attacker to inject arbitrary commands.

Key dates

02Disclosure timeline

February 18, 2022 CVE published
April 16, 2025 Record updated