Skip to content
OpenAdvisories

Product · Airspan Networks

MMP

7 known vulnerabilities.

MMP at a glance

Last 12 months
0
Critical · all time
3
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Latest advisories

  • Critical max 10.0
    ICSA-22-034-02 7 CVEs

    Airspan Networks Mimosa

    Successful exploitation of these vulnerabilities could allow an attacker to gain user data (including organization details) and other sensitive data, compromise Mimosa 's AWS (Amazon Web Services) cloud EC2 instance and S3 Buckets, and execute unauthorized re…

    Airspan Networks
All Critical High Medium Low Exploited only Public exploit

7 results · Feed

  • Critical 10.0
    CVE-2022-21141

    Airspan Networks Mimosa Incorrect Authorization

    MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 does not perform proper authorization checks on multiple API functions. An attacker may gain access to these funct…

    Airspan Networks MMP PTMP C-series and A5x PTP C-series
  • High 8.6
    CVE-2022-21176

    Airspan Networks Mimosa SQL Injection

    MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 does not properly sanitize user input, which may allow an attacker to perform a SQL injection and obtain sensitive…

    Airspan Networks PTMP C-series and A5x PTP C-series MMP
  • High 7.5
    CVE-2022-21143

    Airspan Networks Mimosa OS Command Injection

    MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 does not properly sanitize user input on several locations, which may allow an attacker to inject arbitrary comman…

    Airspan Networks MMP PTMP C-series and A5x PTP C-series
  • Medium 6.5
    CVE-2022-21800

    Airspan Networks Mimosa Use of a Broken or Risky Cryptographic Algorithm

    MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 uses the MD5 algorithm to hash the passwords before storing them but does not salt the hash. As a result, attacker…

    Airspan Networks MMP PTMP C-series and A5x PTP C-series
  • High 7.5
    CVE-2022-0138

    Airspan Networks Mimosa Deserialization of Untrusted Data

    MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 has a deserialization function that does not validate or check the data, allowing arbitrary classes to be created.

    Airspan Networks PTP C-series MMP PTMP C-series and A5x
  • Critical 10.0
    CVE-2022-21196

    Airspan Networks Mimosa Improper Authorization

    MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 does not perform proper authorization and authentication checks on multiple API routes. An attacker may gain acces…

    Airspan Networks MMP PTMP C-series and A5x PTP C-series
  • Critical 10.0
    CVE-2022-21215

    Airspan Networks Mimosa Server-Side Request Forgery (SSRF)

    This vulnerability could allow an attacker to force the server to create and execute a web request granting access to backend APIs that are only accessible to the Mimosa MMP server, or request pages that could perform some actions themselves. The attacker cou…

    Airspan Networks PTP C-series MMP PTMP C-series and A5x