CVE:CVE-2022-21176
CNNVD:CNNVD-202202-202
Airspan Networks Mmp是美国Airspan Networks公司的一个用于 Mimosa 固定无线设备的高级独立网络管理软件平台。
Airspan Networks Mmp存在SQL注入漏洞，该漏洞源于用户提供的SQL数据没有充分处理。远程攻击者可利用该漏洞可以向受影响的应用程序发送专门的请求，并获取敏感信息。该漏洞允许远程攻击者在数据库中执行任意SQL查询。
solution:Upgrade airspan mimosa_management_platform to a higher version than 1.0.3,and avoid the version (,1.0.3); Upgrade airspan c6x_firmware to a higher version than 2.8.6.1,and avoid the version (,2.8.6.1); Upgrade airspan c5x_firmware to a higher version than 2.8.6.1,and avoid the version (,2.8.6.1); Upgrade airspan c5c_firmware to a higher version than 2.8.6.1,and avoid the version (,2.8.6.1); Upgrade airspan a5x_firmware to a higher version than 2.5.4.1,and avoid the version (,2.5.4.1)