Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
mimosa client radios vulnerabilities and exploits
(subscribe to this query)
7.5
CVSSv3
CVE-2017-9131
An issue exists on Mimosa Client Radios prior to 2.2.3 and Mimosa Backhaul Radios prior to 2.2.3. By connecting to the Mosquitto broker on an access point and one of its clients, an attacker can gather enough information to craft a command that reboots the client remotely when se...
Mimosa Backhaul Radios
Mimosa Client Radios
7.5
CVSSv3
CVE-2017-9132
A hard-coded credentials issue exists on Mimosa Client Radios prior to 2.2.3, Mimosa Backhaul Radios prior to 2.2.3, and Mimosa Access Points prior to 2.2.3. These devices run Mosquitto, a lightweight message broker, to send information between devices. By using the vendor's...
Mimosa Client Radios
Mimosa Backhaul Radios
8.8
CVSSv3
CVE-2017-9133
An issue exists on Mimosa Client Radios prior to 2.2.3 and Mimosa Backhaul Radios prior to 2.2.3. In the device's web interface, after logging in, there is a page that allows you to ping other hosts from the device and view the results. The user is allowed to specify which h...
Mimosa Backhaul Radios
Mimosa Client Radios
7.5
CVSSv3
CVE-2017-9134
An information-leakage issue exists on Mimosa Client Radios prior to 2.2.3 and Mimosa Backhaul Radios prior to 2.2.3. There is a page in the web interface that will show you the device's serial number, regardless of whether or not you have logged in. This information-leakage...
Mimosa Client Radios
Mimosa Backhaul Radios
8.8
CVSSv3
CVE-2017-9135
An issue exists on Mimosa Client Radios prior to 2.2.4 and Mimosa Backhaul Radios prior to 2.2.4. On the backend of the device's web interface, there are some diagnostic tests available that are not displayed on the webpage; these are only accessible by crafting a POST reque...
Mimosa Client Radios
Mimosa Backhaul Radios
7.5
CVSSv3
CVE-2017-9136
An issue exists on Mimosa Client Radios prior to 2.2.3. In the device's web interface, there is a page that allows an malicious user to use an unsanitized GET parameter to download files from the device as the root user. The attacker can download any file from the device...
Mimosa Client Radios
Mimosa Backhaul Radios
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
validation
CVE-2024-34413
CVE-2024-34089
CVE-2024-33408
local
SQL
CVE-2024-0402
CVE-2024-33910
CVE-2024-31848
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started