Description (CNA)
MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 has a deserialization function that does not validate or check the data, allowing arbitrary classes to be created.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Airspan Networks / MMP | affected unspecified before v1.0.3 |
| Airspan Networks / PTP C-series | affected unspecified before v2.8.6.1 |
| Airspan Networks / PTMP C-series and A5x | affected unspecified before v2.5.4.1 |
CWE
CWE-502
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.