High severity7.5NVD Advisory· Published Feb 18, 2022· Updated Jun 17, 2026

CVE-2022-0138

Description

MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 has a deserialization function that does not validate or check the data, allowing arbitrary classes to be created.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Airspan/Mimosa Management Platform
cpe:2.3:a:airspan:mimosa_management_platform:*:*:*:*:*:*:*:*
Range: <1.0.3
Airspan/A5x Firmware
cpe:2.3:o:airspan:a5x_firmware:*:*:*:*:*:*:*:*
Range: <2.5.4.1
Airspan/C5c Firmware
cpe:2.3:o:airspan:c5c_firmware:*:*:*:*:*:*:*:*
Range: <2.8.6.1
Airspan/C5x Firmware
cpe:2.3:o:airspan:c5x_firmware:*:*:*:*:*:*:*:*
Range: <2.8.6.1
Airspan/C6x Firmware
cpe:2.3:o:airspan:c6x_firmware:*:*:*:*:*:*:*:*
Range: <2.8.6.1
mmp/MMPllm-fuzzy
Range: <v1.0.3
PTP/PTP C-seriesllm-fuzzy
Range: <v2.8.6.1
PTMP/PTMP C-seriesllm-fuzzy
Range: <v2.5.4.1
PTMP/A5xllm-fuzzy
Range: <v2.5.4.1
Airspan/Mmpv5
Range: unspecified
Airspan/Ptmp C Series And A5xv5
Range: unspecified

Patches

Vulnerability mechanics

References

www.cisa.gov/uscert/ics/advisories/icsa-22-034-02nvdThird Party AdvisoryUS Government Resource

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000