CVE-2017-9133
HighSummary
An issue exists in Mimosa Client Radios and Mimosa Backhaul Radios before version 2.2.3, where the web interface allows pinging other hosts. The lack of server-side sanitization of the variable enables an attacker to execute shell commands as the root user.
Risk Assessment
An attacker could gain full access to the system, posing a significant security risk to the devices and network.
Recommendation
It is recommended to update the devices to version 2.2.3 or later to mitigate this vulnerability.
Other vulnerabilities in Mimosa Client Radios, Mimosa Backhaul Radios
See all- CVE-2017-9135High
An issue was discovered on Mimosa Client Radios before 2.2.4 and Mimosa Backhaul Radios before 2.2.4. Some diagnostic tests are available only through a crafted POST request, allowing an attacker to execute shell commands as the root user.
- CVE-2017-9134High
An information-leakage issue was discovered on Mimosa Client Radios before version 2.2.3 and Mimosa Backhaul Radios before version 2.2.3. The web interface allows viewing the device's serial number without logging in.
- CVE-2017-9131High
An issue was discovered on Mimosa Client Radios before version 2.2.3 and Mimosa Backhaul Radios before version 2.2.3, allowing an attacker to remotely execute a reboot command on the client via the Mosquitto broker.
Original NVD description (English source)
An issue was discovered on Mimosa Client Radios before 2.2.3 and Mimosa Backhaul Radios before 2.2.3. In the device's web interface, after logging in, there is a page that allows you to ping other hosts from the device and view the results. The user is allowed to specify which host to ping, but this variable is not sanitized server-side, which allows an attacker to pass a specially crafted string to execute shell commands as the root user.