Vulnerability · Published Feb 18, 2022 · Assigned by icscert

CVE-2022-21215Airspan Networks Mimosa Server-Side Request Forgery (SSRF)

Critical 10.0

In plain English

A critical-severity server-side request forgery in MMP from Airspan Networks. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.4% (higher than 73% of all known vulnerabilities).

Severity (CVSS 3.1)10.0Critical

Exploit odds (30 days)1.4%top 27.2% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

This vulnerability could allow an attacker to force the server to create and execute a web request granting access to backend APIs that are only accessible to the Mimosa MMP server, or request pages that could perform some actions themselves. The attacker could force the server into accessing routes on those cloud-hosting platforms, accessing secret keys, changing configurations, etc. Affecting MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1.

Affected products (as reported)

Vendor	Product	Versions
Airspan Networks	MMP	unspecified – before v1.0.3
Airspan Networks	PTP C-series	unspecified – before v2.8.6.1
Airspan Networks	PTMP C-series and A5x	unspecified – before v2.5.4.1

Weakness: CWE-918 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

References

https://www.cisa.gov/uscert/ics/advisories/icsa-22-034-02 x_refsource_MISC