mimosa backhaul radios vulnerabilities and exploits

(subscribe to this query)

5

CVSSv2

An information-leakage issue exists on Mimosa Client Radios prior to 2.2.3 and Mimosa Backhaul Radios prior to 2.2.3. There is a page in the web interface that will show you the device's serial number, regardless of whether or not you have logged in. This information-leakage...

Mimosa Client Radios Mimosa Backhaul Radios

5

CVSSv2

An issue exists on Mimosa Client Radios prior to 2.2.3 and Mimosa Backhaul Radios prior to 2.2.3. By connecting to the Mosquitto broker on an access point and one of its clients, an attacker can gather enough information to craft a command that reboots the client remotely when se...

Mimosa Backhaul Radios Mimosa Client Radios

5

CVSSv2

A hard-coded credentials issue exists on Mimosa Client Radios prior to 2.2.3, Mimosa Backhaul Radios prior to 2.2.3, and Mimosa Access Points prior to 2.2.3. These devices run Mosquitto, a lightweight message broker, to send information between devices. By using the vendor's...

Mimosa Client Radios Mimosa Backhaul Radios

9

CVSSv2

An issue exists on Mimosa Client Radios prior to 2.2.3 and Mimosa Backhaul Radios prior to 2.2.3. In the device's web interface, after logging in, there is a page that allows you to ping other hosts from the device and view the results. The user is allowed to specify which h...

Mimosa Backhaul Radios Mimosa Client Radios

9

CVSSv2

An issue exists on Mimosa Client Radios prior to 2.2.4 and Mimosa Backhaul Radios prior to 2.2.4. On the backend of the device's web interface, there are some diagnostic tests available that are not displayed on the webpage; these are only accessible by crafting a POST reque...

Mimosa Client Radios Mimosa Backhaul Radios

7.8

CVSSv2

An issue exists on Mimosa Client Radios prior to 2.2.3. In the device's web interface, there is a page that allows an malicious user to use an unsanitized GET parameter to download files from the device as the root user. The attacker can download any file from the device...

Mimosa Client Radios Mimosa Backhaul Radios

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook