CVE:CVE-2022-21196
CNNVD:CNNVD-202202-207
Airspan Mmp是美国Airspan公司的一个用于 Mimosa 固定无线设备的高级独立网络管理软件平台。
Airspan Mmp  存在安全漏洞，该漏洞源于软件在多个API路由上存在不适当的授权问题。远程攻击者可利用该漏洞可以访问这些API路由，并在目标系统上执行任意代码。该漏洞允许远程攻击者绕过授权检查。
solution:Upgrade airspan mimosa_management_platform to a higher version than 1.0.3,and avoid the version (,1.0.3); Upgrade airspan c6x_firmware to a higher version than 2.8.6.1,and avoid the version (,2.8.6.1); Upgrade airspan c5x_firmware to a higher version than 2.8.6.1,and avoid the version (,2.8.6.1); Upgrade airspan c5c_firmware to a higher version than 2.8.6.1,and avoid the version (,2.8.6.1); Upgrade airspan a5x_firmware to a higher version than 2.5.4.1,and avoid the version (,2.5.4.1)