CVE-2017-9134
HighSummary
An information-leakage issue was discovered on Mimosa Client Radios before version 2.2.3 and Mimosa Backhaul Radios before version 2.2.3. The web interface allows viewing the device's serial number without logging in.
Risk Assessment
The leakage of the serial number can lead to unauthorized remote factory resets of the device, posing a significant security risk to the network.
Recommendation
It is recommended to update the devices to version 2.2.3 or later to eliminate the information leakage issue and secure access to the reset function.
Other vulnerabilities in Mimosa Client Radios, Mimosa Backhaul Radios
See all- CVE-2017-9135High
An issue was discovered on Mimosa Client Radios before 2.2.4 and Mimosa Backhaul Radios before 2.2.4. Some diagnostic tests are available only through a crafted POST request, allowing an attacker to execute shell commands as the root user.
- CVE-2017-9133High
An issue exists in Mimosa Client Radios and Mimosa Backhaul Radios before version 2.2.3, where the web interface allows pinging other hosts. The lack of server-side sanitization of the variable enables an attacker to execute shell commands as the root user.
- CVE-2017-9131High
An issue was discovered on Mimosa Client Radios before version 2.2.3 and Mimosa Backhaul Radios before version 2.2.3, allowing an attacker to remotely execute a reboot command on the client via the Mosquitto broker.
Original NVD description (English source)
An information-leakage issue was discovered on Mimosa Client Radios before 2.2.3 and Mimosa Backhaul Radios before 2.2.3. There is a page in the web interface that will show you the device's serial number, regardless of whether or not you have logged in. This information-leakage issue is relevant because there is another page (accessible without any authentication) that allows you to remotely factory reset the device simply by entering the serial number.