← Database

CVE-2022-0138

HIGH CVSS: 7.5 Published: 2022-02-18 Modified: 2026-06-17

Description

MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 has a deserialization function that does not validate or check the data, allowing arbitrary classes to be created.

Affected Platforms

Airspan C5CAirspan C6XAirspan C5XAirspan A5X FirmwareAirspan A5XAirspan C5C FirmwareAirspan C6X FirmwareAirspan C5X FirmwareAirspan Mimosa Management Platform

Weakness Type

CWE-502, CWE-502

References