Skip to content
OpenAdvisories

Vendor

Airspan Networks

14 known vulnerabilities.

3 results · Clear filters · Feed

  • Critical 10.0

    Airspan Networks Mimosa Incorrect Authorization

    MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 does not perform proper authorization checks on multiple API functions. An attacker may gain access to these funct…

  • Critical 10.0

    Airspan Networks Mimosa Improper Authorization

    MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 does not perform proper authorization and authentication checks on multiple API routes. An attacker may gain acces…

  • Critical 10.0

    Airspan Networks Mimosa Server-Side Request Forgery (SSRF)

    This vulnerability could allow an attacker to force the server to create and execute a web request granting access to backend APIs that are only accessible to the Mimosa MMP server, or request pages that could perform some actions themselves. The attacker cou…