CVE-2017-9131
HighSummary
An issue was discovered on Mimosa Client Radios before version 2.2.3 and Mimosa Backhaul Radios before version 2.2.3, allowing an attacker to remotely execute a reboot command on the client via the Mosquitto broker.
Risk Assessment
This vulnerability allows an attacker to remotely trigger a reboot command, potentially leading to device disruption and a DoS attack.
Recommendation
It is recommended to update devices to version 2.2.3 or later to mitigate the risks associated with this vulnerability.
Other vulnerabilities in Mimosa Client Radios, Mimosa Backhaul Radios
See all- CVE-2017-9135High
An issue was discovered on Mimosa Client Radios before 2.2.4 and Mimosa Backhaul Radios before 2.2.4. Some diagnostic tests are available only through a crafted POST request, allowing an attacker to execute shell commands as the root user.
- CVE-2017-9134High
An information-leakage issue was discovered on Mimosa Client Radios before version 2.2.3 and Mimosa Backhaul Radios before version 2.2.3. The web interface allows viewing the device's serial number without logging in.
- CVE-2017-9133High
An issue exists in Mimosa Client Radios and Mimosa Backhaul Radios before version 2.2.3, where the web interface allows pinging other hosts. The lack of server-side sanitization of the variable enables an attacker to execute shell commands as the root user.
Original NVD description (English source)
An issue was discovered on Mimosa Client Radios before 2.2.3 and Mimosa Backhaul Radios before 2.2.3. By connecting to the Mosquitto broker on an access point and one of its clients, an attacker can gather enough information to craft a command that reboots the client remotely when sent to the client's Mosquitto broker, aka "unauthenticated remote command execution." This command can be re-sent endlessly to act as a DoS attack on the client.