CVE-2017-9133

An issue was discovered on Mimosa Client Radios before 2.2.3 and Mimosa Backhaul Radios before 2.2.3. In the device's web interface, after logging in, there is a page that allows you to ping other hosts from the device and view the results. The user is allowed to specify which host to ping, but this variable is not sanitized server-side, which allows an attacker to pass a specially crafted string to execute shell commands as the root user.

• CWE-74

• http://blog.iancaling.com/post/160596244178Third Party Advisory
• http://blog.iancaling.com/post/160596244178Third Party Advisory

Published

May 21, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-9127The quicktime_user_atoms_read_atom function in useratoms.c i…
• CVE-2017-9128The quicktime_video_width function in lqt_quicktime.c in lib…
• CVE-2017-9129The wav_open_read function in frontend/input.c in Freeware A…
• CVE-2017-9130The faacEncOpen function in libfaac/frame.c in Freeware Adva…5.5
• CVE-2017-9131An issue was discovered on Mimosa Client Radios before 2.2.3…
• CVE-2017-9132A hard-coded credentials issue was discovered on Mimosa Clie…
• CVE-2017-9134An information-leakage issue was discovered on Mimosa Client…
• CVE-2017-9135An issue was discovered on Mimosa Client Radios before 2.2.4…
• CVE-2017-9136An issue was discovered on Mimosa Client Radios before 2.2.3…
• CVE-2017-9137Ceragon FibeAir IP-10 wireless radios through 7.2.0 have a d…
• CVE-2017-9138There is a debug-interface vulnerability on some Tenda route…
• CVE-2017-9139There is a stack-based buffer overflow on some Tenda routers…