Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2022-0138

Airspan Networks Mimosa Deserialization of Untrusted Data

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 has a deserialization function that does not validate or check the data, allowing arbitrary classes to be created.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Airspan Networks MMP

  • unspecified to < v1.0.3affected

Airspan Networks PTP C-series

  • unspecified to < v2.8.6.1affected

Airspan Networks PTMP C-series and A5x

  • unspecified to < v2.5.4.1affected

References