CVE-2022-21196

CVE-2022-21196 is a critical vulnerability affecting multiple Airspan Mimosa products, including MMP, PTP C-series, and PTMP C-series/A5x devices. It stems from improper authorization and authentication checks on several API routes, allowing unauthenticated attackers to gain remote code execution, cause denial-of-service, and exfiltrate sensitive information. With a CVSS score of 9.8 (Critical), this network-exploitable vulnerability requires no user interaction and has high impacts on confidentiality, integrity, and availability. Currently, there is no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.