High

DATE	CVE	VULNERABILITY TITLE	RISK
2022-02-18	CVE-2022-0138	Deserialization of Untrusted Data vulnerability in Airspan products MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 has a deserialization function that does not validate or check the data, allowing arbitrary classes to be created. network low complexity airspan CWE-502	7.5
2022-02-18	CVE-2022-21176	SQL Injection vulnerability in Airspan products MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 does not properly sanitize user input, which may allow an attacker to perform a SQL injection and obtain sensitive information. network low complexity airspan CWE-89	7.5