CVE-2022-21141

CVE-2022-21141 is a critical authorization bypass vulnerability affecting multiple Airspan Mimosa products, including the Mimosa Management Platform (MMP) and various C-series and A5x devices. This flaw allows an unauthenticated attacker to access restricted API functions, potentially leading to remote code execution, denial-of-service, and sensitive information disclosure. With a CVSS score of 9.8 (Critical), it presents a severe risk due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion, indicating awareness among security researchers.