Mimosa Client Radios, Mimosa Backhaul Radios vulnerabilities
4 known CVE vulnerabilities in Mimosa Client Radios, Mimosa Backhaul Radios, translated and rated.
- CVE-2017-9135High
An issue was discovered on Mimosa Client Radios before 2.2.4 and Mimosa Backhaul Radios before 2.2.4. Some diagnostic tests are available only through a crafted POST request, allowing an attacker to execute shell commands as the root user.
- CVE-2017-9134High
An information-leakage issue was discovered on Mimosa Client Radios before version 2.2.3 and Mimosa Backhaul Radios before version 2.2.3. The web interface allows viewing the device's serial number without logging in.
- CVE-2017-9133High
An issue exists in Mimosa Client Radios and Mimosa Backhaul Radios before version 2.2.3, where the web interface allows pinging other hosts. The lack of server-side sanitization of the variable enables an attacker to execute shell commands as the root user.
- CVE-2017-9131High
An issue was discovered on Mimosa Client Radios before version 2.2.3 and Mimosa Backhaul Radios before version 2.2.3, allowing an attacker to remotely execute a reboot command on the client via the Mosquitto broker.