CVE-2022-36312

Airspan AirVelocity 1500 software version 15.18.00.2511 lacks CSRF protections in the eNodeB's web management UI. This issue may affect other AirVelocity and AirSpeed models...

CVE-2022-36312

CVE-2022-36312 affects Airspan AirVelocity 1500, version 15.18.00.2511, with CSRF protections missing in the eNodeB web management UI. Other AirVelocity/AirSpeed models may be affected. The root cause is the lack of CSRF protections in the web UI, leading to potential CSRF exploitation; no specif...

CVE-2022-36311

CVE-2022-36311 affects Airspan AirVelocity 1500 (and may affect AirSpeed models) with versions prior to 15.18.00.2511. The root cause is an injection that enables cross-site scripting in the SNMP community field of the eNodeB web management UI. The available sources state the vulnerability and af...

CVE-2022-36311

Airspan AirVelocity 1500 prior to software version 15.18.00.2511 is vulnerable to injection leading to XSS in the SNMP community field in the eNodeB's web management UI. This issue may affect other AirVelocity and AirSpeed models...

CVE-2022-36310

CVE-2022-36310 affects Airspan AirVelocity 1500 (and possibly related AirSpeed/AirVelocity models). The root cause is NET-SNMP-EXTEND-MIB being enabled on the snmpd service, which allows an attacker with SNMP write privileges to execute commands as root on the eNodeB. Affected software: AirVeloci...

CVE-2022-36310

Airspan AirVelocity 1500 software prior to version 15.18.00.2511 had NET-SNMP-EXTEND-MIB enabled on its snmpd service, enabling an attacker with SNMP write abilities to execute commands as root on the eNodeB. This issue may affect other AirVelocity and AirSpeed models...

CVE-2022-36309

Airspan AirVelocity 1500 software versions prior to 15.18.00.2511 have a root command injection vulnerability in the ActiveBank parameter of the recoverySubmit.cgi script running on the eNodeB's web management UI. This issue may affect other AirVelocity and AirSpeed models...

CVE-2022-36309

CVE-2022-36309 affects Airspan AirVelocity 1500 (and possibly AirSpeed models) with versions prior to 15.18.00.2511. The vuln is a root command injection in the ActiveBank parameter of recoverySubmit.cgi running on the eNodeB web management UI. Impact is associated with potential full compromise ...

CVE-2022-36308

Airspan AirVelocity 1500 web management UI displays SNMP credentials in plaintext on software versions older than 15.18.00.2511, and stores SNMPv3 credentials unhashed on the filesystem, enabling anyone with web access to use these credentials to manipulate the eNodeB over SNMP. This issue may...

CVE-2022-36308

The CVE-2022-36308 entry affects Airspan AirVelocity 1500 (web management UI). The root cause is that SNMP credentials are exposed: plaintext in the management UI for versions earlier than 15.18.00.2511 and SNMPv3 credentials stored unhashed on the filesystem, enabling anyone with web access to u...

CVE-2022-36307

The AirVelocity 1500 prints SNMP credentials on its physically accessible serial port during boot. This was fixed in AirVelocity 1500 software version 15.18.00.2511 and may affect other AirVelocity and AirSpeed models...

CVE-2022-36307

The CVE-2022-36307 issue affects AirSpeed/AirVelocity devices, notably the AirVelocity 1500, which prints SNMP credentials on the physically accessible serial port during boot. Root cause: credentials exposed via boot-time serial output. Impact: exposure of SNMP credentials; CVSS indicates high c...

CVE-2022-36306

An authenticated attacker can enumerate and download sensitive files, including the eNodeB's web management UI's TLS private key, the web server binary, and the web server configuration file. These vulnerabilities were found in AirVelocity 1500 running software version 9.3.0.01249, were still...

CVE-2022-36306

CVE-2022-36306 affects Airspan AirVelocity 1500 (software version 9.3.0.01249; still present in 15.18.00.2511) and may impact other AirVelocity/AirSpeed models. The vulnerability allows an authenticated attacker to enumerate and download sensitive files, including the TLS private key of the eNode...

Airspan AirVelocity 1500 安全漏洞

The Airspan AirVelocity 1500 is a revolutionary indoor high-performance small cell from Airspan USA. Designed to bring public access LTE networks to indoor spaces A security vulnerability exists in versions prior to Airspan AirVelocity 1500 15.18.00.2511 that stems from its web management UI...

Airspan AirVelocity 1500 操作系统命令注入漏洞

The Airspan AirVelocity 1500 is a revolutionary indoor high-performance small cell from Airspan USA. Designed to bring public access LTE networks into indoor spaces A security vulnerability exists in versions prior to Airspan AirVelocity 1500 15.18.00.2511, which stems from a command injection wi...

Airspan AirVelocity 1500 安全漏洞

The Airspan AirVelocity 1500 is a revolutionary indoor high-performance small cell from Airspan USA. Designed to bring public access LTE networks to indoor spaces A security vulnerability exists in versions prior to Airspan AirVelocity 1500 15.18.00.2511, which stems from NET-SNMP-EXTEND-MIB bein...

PT-2022-23306 · Airspan · Airvelocity 1500

Name of the Vulnerable Software and Affected Versions: Airspan AirVelocity 1500 software prior to version 15.18.00.2511 Description: The issue allows an attacker with SNMP write abilities to execute commands as root on the eNodeB due to NET-SNMP-EXTEND-MIB being enabled on its snmpd service. This...

PT-2022-23302 · Airspeed +1 · Airspeed +1

Name of the Vulnerable Software and Affected Versions: AirVelocity 1500 versions prior to 15.18.00.2511 Other AirVelocity and AirSpeed models affected versions not specified Description: The issue concerns the printing of SNMP credentials on the physically accessible serial port during boot. This...

PT-2022-23308 · Airspan · Airspan Airvelocity 1500

Name of the Vulnerable Software and Affected Versions: Airspan AirVelocity 1500 version 15.18.00.2511 Description: The issue is related to a lack of CSRF protections in the eNodeB's web management UI. This may potentially affect other AirVelocity and AirSpeed models. Recommendations: For Airspan...