CVE-2022-21141: Airspan Networks MMP, заобикаляне на вход и права

Описание

Оригинално описание

MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 does not perform proper authorization checks on multiple API functions. An attacker may gain access to these functions and achieve remote code execution, create a denial-of-service condition, and obtain sensitive information.

Засегнати продукти

• Airspan Networks MMP: unspecified преди v1.0.3
• Airspan Networks PTP C-series: unspecified преди v2.8.6.1
• Airspan Networks PTMP C-series and A5x: unspecified преди v2.5.4.1

Вид слабост

• CWE-863 Incorrect Authorization

История

Други уязвимости в Airspan Networks MMP

• 8.6CVE-2022-21176
• 7.5CVE-2022-21143
• 6.5CVE-2022-21800
• 7.5CVE-2022-0138
• 10.0CVE-2022-21196

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2022-21141
• https://nvd.nist.gov/vuln/detail/CVE-2022-21141
• https://www.cisa.gov/uscert/ics/advisories/icsa-22-034-02