Skip to content

CVE-2017-9134 An information-leakage issue was discovered on Mimosa Client Radios before 2.2.3 and Mimosa Backhaul Radios before 2.2.3. There is a page in the web interface that will show you the device's serial nu...

HighCVSS 7.5 EPSS 1.2%
Published
Updated
Exploit status
No public exploit known

Description

An information-leakage issue was discovered on Mimosa Client Radios before 2.2.3 and Mimosa Backhaul Radios before 2.2.3. There is a page in the web interface that will show you the device's serial number, regardless of whether or not you have logged in. This information-leakage issue is relevant because there is another page (accessible without any authentication) that allows you to remotely factory reset the device simply by entering the serial number.

Affected products

ProductAffected versionsFixed in
mimosa backhaul radios <= 2.2.1 No fix listed
mimosa client radios <= 2.2.1 No fix listed

References