CVE-2017-9135
HighSummary
An issue was discovered on Mimosa Client Radios before 2.2.4 and Mimosa Backhaul Radios before 2.2.4. Some diagnostic tests are available only through a crafted POST request, allowing an attacker to execute shell commands as the root user.
Risk Assessment
This vulnerability poses a serious security risk as it allows attackers to gain full system privileges, potentially compromising the device and network.
Recommendation
It is recommended to update devices to version 2.2.4 or later to mitigate this vulnerability and to monitor access to the web interface for potential attack attempts.
Other vulnerabilities in Mimosa Client Radios, Mimosa Backhaul Radios
See all- CVE-2017-9134High
An information-leakage issue was discovered on Mimosa Client Radios before version 2.2.3 and Mimosa Backhaul Radios before version 2.2.3. The web interface allows viewing the device's serial number without logging in.
- CVE-2017-9133High
An issue exists in Mimosa Client Radios and Mimosa Backhaul Radios before version 2.2.3, where the web interface allows pinging other hosts. The lack of server-side sanitization of the variable enables an attacker to execute shell commands as the root user.
- CVE-2017-9131High
An issue was discovered on Mimosa Client Radios before version 2.2.3 and Mimosa Backhaul Radios before version 2.2.3, allowing an attacker to remotely execute a reboot command on the client via the Mosquitto broker.
Original NVD description (English source)
An issue was discovered on Mimosa Client Radios before 2.2.4 and Mimosa Backhaul Radios before 2.2.4. On the backend of the device's web interface, there are some diagnostic tests available that are not displayed on the webpage; these are only accessible by crafting a POST request with a program like cURL. There is one test accessible via cURL that does not properly sanitize user input, allowing an attacker to execute shell commands as the root user.