CVE:CVE-2022-21215
CNNVD:CNNVD-202202-204
Airspan Networks Mmp是美国Airspan Networks公司的一个用于 Mimosa 固定无线设备的高级独立网络管理软件平台。
Airspan Networks Mmp 存在代码问题漏洞，该漏洞源于用户提供的输入没有充分验证。远程攻击者可利用该漏洞可以发送一个特别制作的HTTP请求，并欺骗应用程序向任意系统发起请求。该漏洞允许远程攻击者执行SSRF攻击。
solution:Upgrade airspan mimosa_management_platform to a higher version than 1.0.3,and avoid the version (,1.0.3); Upgrade airspan c6x_firmware to a higher version than 2.8.6.1,and avoid the version (,2.8.6.1); Upgrade airspan c5x_firmware to a higher version than 2.8.6.1,and avoid the version (,2.8.6.1); Upgrade airspan c5c_firmware to a higher version than 2.8.6.1,and avoid the version (,2.8.6.1); Upgrade airspan a5x_firmware to a higher version than 2.5.4.1,and avoid the version (,2.5.4.1)