CVE-2017-9134

An information-leakage issue was discovered on Mimosa Client Radios before 2.2.3 and Mimosa Backhaul Radios before 2.2.3

published May 21, 2017

CVSS
—
EPSS
1%
Percentile
67.5
In the wild
Unconfirmed
What it is

An information-leakage issue was discovered on Mimosa Client Radios before 2.2.3 and Mimosa Backhaul Radios before 2.2.3. There is a page in the web interface that will show you the device's serial number, regardless of whether or not you have logged in. This information-leakage issue is relevant because there is another page (accessible without any authentication) that allows you to remotely factory reset the device simply by entering the serial number.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01191 · 67.5th percentile
Published
2017-05-21T21:00Z
EPSS history
Timeline
  • 21 MAY 21:00Z
    An information-leakage issue was discovered on Mimosa Client Radios before 2.2.3 and Mimosa Backhaul Radios before 2.2.3
    cvelistv5