CVE-2022-36309

🗓️ 16 Aug 2022 00:33:24Reported by facebookType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 62 Views

Airspan AirVelocity 1500 software versions prior to 15.18.00.2511 have a root command injection vulnerability in the ActiveBank parameter of the recoverySubmit.cgi script running on the eNodeB's web management UI. This issue may affect other AirVelocity and AirSpeed models

Reporter	Title	Published	Views	Family All 8
ATTACKERKB	CVE-2022-36309	16 Aug 202201:15	–	attackerkb
Circl	CVE-2022-36309	16 Aug 202207:46	–	circl
CNNVD	Airspan AirVelocity 1500 操作系统命令注入漏洞	16 Aug 202200:00	–	cnnvd
Cvelist	CVE-2022-36309	16 Aug 202200:33	–	cvelist
NVD	CVE-2022-36309	16 Aug 202201:15	–	nvd
Prion	Command injection	16 Aug 202201:15	–	prion
Positive Technologies	PT-2022-23304 · Airspan · Airspan Airvelocity 1500	16 Aug 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-36309	22 May 202523:16	–	redhatcve

NVD

Node

airspan airvelocity_1500_firmwareRange9.3.0.01249–15.18.00.2511

AND

airspan airvelocity_1500Match-

[
  {
    "product": "AirVelocity",
    "vendor": "Airspan",
    "versions": [
      {
        "lessThan": "15.18.00.2511",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]