NVD

Id
86226  
Name
CVE-2017-9135  
Description
An issue was discovered on Mimosa Client Radios before 2.2.4 and Mimosa Backhaul Radios before 2.2.4. On the backend of the device's web interface, there are some diagnostic tests available that are not displayed on the webpage; these are only accessible by crafting a POST request with a program like cURL. There is one test accessible via cURL that does not properly sanitize user input, allowing an attacker to execute shell commands as the root user.  
Reject
 
CVSS Version
2  
CVSS Score
9  
Severity
High  
CVSS Base Score
9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:C/I:C/A:C)  
Pub Date
2017-05-27  
Published
2017-05-21  
Modified Date
2017-05-26  
Seq
2017-9135  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
419142 86226 CVE-2017-7225 97275  View
421589 86226 CVE-2017-3213 http://www.kb.cert.org/vuls/id/276408  View
421590 86226 CVE-2017-3213 98308  View
421591 86226 CVE-2017-3213 https://medium.com/@chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f  View
421592 86226 CVE-2017-3213 http://www.kb.cert.org/vuls/id/276408  View
421593 86226 CVE-2017-3213 98308  View
421594 86226 CVE-2017-3213 https://medium.com/@chronic_9612/follow-up-76-popular-apps-confirmed-vulnerable-to-silent-interception-of-tls-protected-data-64185035029f  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
67903 JVNDB-2017-004185 Mimosa Client および Backhaul におけるインジェクションに関する脆弱性 Mimosa Client および Backhaul には、インジェクションに関する脆弱性が存在します。 CVE-2017-9135 0 CVE-2017-9135 86226 9 8.8 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-004185.html 2017-05-12 2017-06-19 View