CVE-2022-21143

Airspan Networks Mimosa OS Command Injection

State: Published
Severity: 7.5 High
Published: Feb 18, 2022
Updated: Apr 16, 2025
Reserved: Jan 21, 2022

Description

MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 does not properly sanitize user input on several locations, which may allow an attacker to inject arbitrary commands.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N	icscert

Weaknesses

CWE-78 OS Command Injection

Affected Products

Product	Versions
MMPAirspan Networks	before v1.0.3Affected
PTP C-seriesAirspan Networks	before v2.8.6.1Affected
PTMP C-series and A5xAirspan Networks	before v2.5.4.1Affected

References

https://www.cisa.gov/uscert/ics/advisories/icsa-22-034-02

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.