CVE-2017-9134

An information-leakage issue was discovered on Mimosa Client Radios before 2.2.3 and Mimosa Backhaul Radios before 2.2.3. There is a page in the web interface that will show you the device's serial number, regardless of whether or not you have logged in. This information-leakage issue is relevant because there is another page (accessible without any authentication) that allows you to remotely factory reset the device simply by entering the serial number.

• CWE-200

• http://blog.iancaling.com/post/160596244178Third Party Advisory
• http://blog.iancaling.com/post/160596244178Third Party Advisory

Published

May 21, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-9128The quicktime_video_width function in lqt_quicktime.c in lib…
• CVE-2017-9129The wav_open_read function in frontend/input.c in Freeware A…
• CVE-2017-9130The faacEncOpen function in libfaac/frame.c in Freeware Adva…5.5
• CVE-2017-9131An issue was discovered on Mimosa Client Radios before 2.2.3…
• CVE-2017-9132A hard-coded credentials issue was discovered on Mimosa Clie…
• CVE-2017-9133An issue was discovered on Mimosa Client Radios before 2.2.3…
• CVE-2017-9135An issue was discovered on Mimosa Client Radios before 2.2.4…
• CVE-2017-9136An issue was discovered on Mimosa Client Radios before 2.2.3…
• CVE-2017-9137Ceragon FibeAir IP-10 wireless radios through 7.2.0 have a d…
• CVE-2017-9138There is a debug-interface vulnerability on some Tenda route…
• CVE-2017-9139There is a stack-based buffer overflow on some Tenda routers…
• CVE-2017-9140Cross-site scripting (XSS) vulnerability in Telerik.ReportVi…