CVE:CVE-2022-21143
CNNVD:CNNVD-202202-196
Airspan Networks Mmp是美国Airspan Networks公司的一个用于 Mimosa 固定无线设备的高级独立网络管理软件平台。
Airspan Networks Mmp 存在操作系统命令注入漏洞，该漏洞源于软件输入验证不当。未经身份验证的远程攻击者可利用该漏洞可以将专门制作的数据传递给应用程序，并在目标系统上执行任意操作系统命令。
solution:Upgrade airspan mimosa_management_platform to a higher version than 1.0.3,and avoid the version (,1.0.3); Upgrade airspan c6x_firmware to a higher version than 2.8.6.1,and avoid the version (,2.8.6.1); Upgrade airspan c5x_firmware to a higher version than 2.8.6.1,and avoid the version (,2.8.6.1); Upgrade airspan c5c_firmware to a higher version than 2.8.6.1,and avoid the version (,2.8.6.1); Upgrade airspan a5x_firmware to a higher version than 2.5.4.1,and avoid the version (,2.5.4.1)