Airspan vulnerabilities

Newest CVEs

• CVE-2022-36312

  Airspan AirVelocity 1500 software version 15.18.00.2511 lacks CSRF protections in the eNodeB's web management UI. This issue may affect other AirVelocity and…

  Airspan · AirVelocity

  High8.8
• CVE-2022-36311

  Airspan AirVelocity 1500 prior to software version 15.18.00.2511 is vulnerable to injection leading to XSS in the SNMP community field in the eNodeB's web…

  Airspan · AirVelocity

  Medium6.1
• CVE-2022-36310

  Airspan AirVelocity 1500 software prior to version 15.18.00.2511 had NET-SNMP-EXTEND-MIB enabled on its snmpd service, enabling an attacker with SNMP write…

  Airspan · AirVelocity

  High8.8
• CVE-2022-36309

  Airspan AirVelocity 1500 software versions prior to 15.18.00.2511 have a root command injection vulnerability in the ActiveBank parameter of the…

  Airspan · AirVelocity

  High8.8
• CVE-2022-36308

  Airspan AirVelocity 1500 web management UI displays SNMP credentials in plaintext on software versions older than 15.18.00.2511, and stores SNMPv3 credentials…

  Airspan · AirVelocity

  Critical9.1
• CVE-2022-36307

  The AirVelocity 1500 prints SNMP credentials on its physically accessible serial port during boot. This was fixed in AirVelocity 1500 software version…

  Airspan · AirVelocity

  Medium6.8
• CVE-2022-36306

  An authenticated attacker can enumerate and download sensitive files, including the eNodeB's web management UI's TLS private key, the web server binary, and…

  Airspan · AirVelocity

  Medium6.5