Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
mimosa client radios vulnerabilities and exploits
(subscribe to this query)
5
CVSSv2
CVE-2017-9134
An information-leakage issue exists on Mimosa Client Radios prior to 2.2.3 and Mimosa Backhaul Radios prior to 2.2.3. There is a page in the web interface that will show you the device's serial number, regardless of whether or not you have logged in. This information-leakage...
Mimosa Client Radios
Mimosa Backhaul Radios
5
CVSSv2
CVE-2017-9131
An issue exists on Mimosa Client Radios prior to 2.2.3 and Mimosa Backhaul Radios prior to 2.2.3. By connecting to the Mosquitto broker on an access point and one of its clients, an attacker can gather enough information to craft a command that reboots the client remotely when se...
Mimosa Backhaul Radios
Mimosa Client Radios
5
CVSSv2
CVE-2017-9132
A hard-coded credentials issue exists on Mimosa Client Radios prior to 2.2.3, Mimosa Backhaul Radios prior to 2.2.3, and Mimosa Access Points prior to 2.2.3. These devices run Mosquitto, a lightweight message broker, to send information between devices. By using the vendor's...
Mimosa Client Radios
Mimosa Backhaul Radios
9
CVSSv2
CVE-2017-9133
An issue exists on Mimosa Client Radios prior to 2.2.3 and Mimosa Backhaul Radios prior to 2.2.3. In the device's web interface, after logging in, there is a page that allows you to ping other hosts from the device and view the results. The user is allowed to specify which h...
Mimosa Backhaul Radios
Mimosa Client Radios
9
CVSSv2
CVE-2017-9135
An issue exists on Mimosa Client Radios prior to 2.2.4 and Mimosa Backhaul Radios prior to 2.2.4. On the backend of the device's web interface, there are some diagnostic tests available that are not displayed on the webpage; these are only accessible by crafting a POST reque...
Mimosa Client Radios
Mimosa Backhaul Radios
7.8
CVSSv2
CVE-2017-9136
An issue exists on Mimosa Client Radios prior to 2.2.3. In the device's web interface, there is a page that allows an malicious user to use an unsanitized GET parameter to download files from the device as the root user. The attacker can download any file from the device...
Mimosa Client Radios
Mimosa Backhaul Radios
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48693
CVE-2024-30851
CVE-2024-34460
CVE-2024-2887
local
CVE-2024-27956
remote code execution
CVE-2024-34475
privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started