Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in

CVE-2022-36267

🗓️ 08 Aug 2022 14:34:15Reported by mitreType 
cve
 cve🔗 web.nvd.nist.gov📰️ 11 Media mentions👁 317 Views🌐 WEB

Airspan AirSpot 5410 v0.3.4.1-4 Unauthenticated Remote Command Injectio

Related
Detection
Refs
Paths
Social
ReporterTitlePublishedViews
Family
githubexploit
GithubExploit		Exploit for CVE-2022-36267
8 Jan 202422:23
–githubexploit
zdt
zdt		AirSpot 5410 0.3.4.1-4 Remote Command Injection Exploit
10 Aug 202200:00
–zdt
attackerkb
attackerkb		CVE-2022-36267
8 Aug 202215:15
–attackerkb
circl
Circl		CVE-2022-36267
8 Aug 202218:23
–circl
cnnvd
CNNVD		Airspan AirSpot 5410 安全漏洞
8 Aug 202200:00
–cnnvd
checkpoint_advisories
Check Point Advisories		Airspan AirSpot 5410 Command Injection (CVE-2022-36267)
23 Nov 202200:00
–checkpoint_advisories
cvelist
Cvelist		CVE-2022-36267
8 Aug 202214:34
–cvelist
exploitdb
Exploit DB		Airspan AirSpot 5410 version 0.3.4.1 - Remote Code Execution (RCE)
20 Sep 202200:00
–exploitdb
kitploit
Kitploit		CVE-2022-36267-PoC
2 Oct 202622:03
–kitploit
nvd
NVD		CVE-2022-36267
8 Aug 202215:15
–nvd
Rows per page
NVD
Node
AND
airspanairspot_5410_firmwareRange≤0.3.4.1-4
airspanairspot_5410Match-
ParameterPositionPathDescriptionCWE
Commandrequest body/cgi-bin/diagnostics.cgiUnauthenticated remote command injection via diagnostics.cgi on AirSpot 5410, enabling remote code execution through crafted POST data.
targetIPrequest body/cgi-bin/diagnostics.cgiUnauthenticated remote command injection via diagnostics.cgi on AirSpot 5410, enabling remote code execution through crafted POST data.
packetSizerequest body/cgi-bin/diagnostics.cgiUnauthenticated remote command injection via diagnostics.cgi on AirSpot 5410, enabling remote code execution through crafted POST data.
timeOutrequest body/cgi-bin/diagnostics.cgiUnauthenticated remote command injection via diagnostics.cgi on AirSpot 5410, enabling remote code execution through crafted POST data.
countrequest body/cgi-bin/diagnostics.cgiUnauthenticated remote command injection via diagnostics.cgi on AirSpot 5410, enabling remote code execution through crafted POST data.

nwqd

ReverseengineeringAirspanAirSpot-AnalysisofCVE-2022-36266,CVE-2022-36267,CVE-2022-36264,andCVE-2022-36265

threatintelctr

NEW: CVE-2022-36267 In Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists a Unauthenticated remote command injection vulnerability. The ping functionality can be called without user authentication wh... (click for more) https://t.co/nFO1euyIJW

Robo_Alerts

Potentially Critical CVE Detected! CVE-2022-36267 In Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists a Unauthenticated remote command injection vulnerabilit... CVSS: 9.70 #CVE #CyberSecurity

CVEnew

CVE-2022-36267 In Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists a Unauthenticated remote command injection vulnerability. The ping functionality can be called without user authentication when crafting a malicious http request by in... https://t.co/JoINSwVC2T

ColorTokensInc

Emerging Vulnerability Found CVE-2022-36267 - In Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists a Unauthenticated remote command injection vulnerability. The ping functionality can be called without user authentication when craf... See https://t.co/R4tImuwPIw

amirdaly0x00

Airspan AirSpot 5410 未授权RCE漏洞（CVE-2022-36267） https://t.co/ZV9goBgNM6

WolfgangSesin

New post from https://t.co/uXvPWJy6tj (CVE-2022-36267 (airspot_5410_firmware)) has been published on https://t.co/uCYoh9o3R5

www_sesin_at

New post from https://t.co/9KYxtdZjkl (CVE-2022-36267 (airspot_5410_firmware)) has been published on https://t.co/Vijh9myknv

WolfgangSesin

New post from https://t.co/uXvPWJy6tj (CVE-2022-36267 | Airspan AirSpot 5410 up to 0.3.4.1-4 Ping diagnostics.cgi command injection (ID 168047)) has been published on https://t.co/CiUCddEr8v

www_sesin_at

New post from https://t.co/9KYxtdZjkl (CVE-2022-36267 | Airspan AirSpot 5410 up to 0.3.4.1-4 Ping diagnostics.cgi command injection (ID 168047)) has been published on https://t.co/7BUaIEOoWK

Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
17 Jun 2026 04:53Current
8.5High risk
Vulners AI Score8.5
CVSS 3.19.8
EPSS0.54546
In Wild
cve-2022-36267airspanairspot 5410remote command injectionunauthenticatedvulnerabilitynvd
317