CVE-2017-9135

Name of the Vulnerable Software and Affected Versions Mimosa Client Radios versions prior to 2.2.4 Mimosa Backhaul Radios versions prior to 2.2.4

Description An issue was discovered on the backend of the device's web interface, where some diagnostic tests are not displayed on the webpage but are accessible by crafting a POST request. One of these tests does not properly sanitize user input, allowing an attacker to execute shell commands as the root user.

Recommendations For Mimosa Client Radios versions prior to 2.2.4, update to version 2.2.4 or later. For Mimosa Backhaul Radios versions prior to 2.2.4, update to version 2.2.4 or later.