Vulnerabilities > Airspan > Mimosa Management Platform > Medium

DATE CVE VULNERABILITY TITLE RISK
2022-02-18 CVE-2022-0138 Deserialization of Untrusted Data vulnerability in Airspan products
MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 has a deserialization function that does not validate or check the data, allowing arbitrary classes to be created.
network
low complexity
airspan CWE-502
5.0
2022-02-18 CVE-2022-21176 SQL Injection vulnerability in Airspan products
MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 does not properly sanitize user input, which may allow an attacker to perform a SQL injection and obtain sensitive information.
network
low complexity
airspan CWE-89
5.0
2022-02-18 CVE-2022-21800 Inadequate Encryption Strength vulnerability in Airspan products
MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 uses the MD5 algorithm to hash the passwords before storing them but does not salt the hash.
network
low complexity
airspan CWE-326
6.5