← Back

CVE-2022-21800

nvd nist
Published: Feb 18, 2022Modified: Jun 17, 2026

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Exploitability: 2.8 / Impact: 3.6
Source: NVD

Description

MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 uses the MD5 algorithm to hash the passwords before storing them but does not salt the hash. As a result, attackers may be able to crack the hashed passwords.

Affected (5)

Airspan
5 products
Mimosa Management Platform
C6x Firmware
C5x Firmware
C5c Firmware
A5x Firmware
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Mimosa Management Platform
Before 1.0.3
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
C6x Firmware
Before 2.8.6.1
Running on/withPlatform Versions
Airspan
C6x
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
C5x Firmware
Before 2.8.6.1
Running on/withPlatform Versions
Airspan
C5x
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
C5c Firmware
Before 2.8.6.1
Running on/withPlatform Versions
Airspan
C5c
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
A5x Firmware
Before 2.5.4.1
Running on/withPlatform Versions
Airspan
A5x
All versions

Related CWEs

CWE-326
Inadequate Encryption Strength
The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.
CWE-327
Use of a Broken or Risky Cryptographic Algorithm
The product uses a broken or risky cryptographic algorithm or protocol.

References (2)

Source: ics-cert@hq.dhs.gov
Third Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryUS Government Resource

Timeline

No history available yet.