Description
MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 does not perform proper authorization and authentication checks on multiple API routes. An attacker may gain access to these API routes and achieve remote code execution, create a denial-of-service condition, and obtain sensitive information.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Airspan Networks MMP
unspecified to < v1.0.3affected
Airspan Networks PTP C-series
unspecified to < v2.8.6.1affected
Airspan Networks PTMP C-series and A5x
unspecified to < v2.5.4.1affected