Code injection

Airspan AirVelocity 1500 web management UI displays SNMP credentials in plaintext on software versions older than 15.18.00.2511, and stores SNMPv3 credentials unhashed on the filesystem, enabling anyone with web access to use these credentials to manipulate the eNodeB over SNMP. This issue may...

CVE-2022-36311

Airspan AirVelocity 1500 prior to software version 15.18.00.2511 is vulnerable to injection leading to XSS in the SNMP community field in the eNodeB's web management UI. This issue may affect other AirVelocity and AirSpeed models...

CVE-2022-36311

CVE-2022-36311 affects Airspan AirVelocity 1500 (and may affect AirSpeed models) with versions prior to 15.18.00.2511. The root cause is an injection that enables cross-site scripting in the SNMP community field of the eNodeB web management UI. The available sources state the vulnerability and af...

CVE-2022-36310

CVE-2022-36310 affects Airspan AirVelocity 1500 (and possibly related AirSpeed/AirVelocity models). The root cause is NET-SNMP-EXTEND-MIB being enabled on the snmpd service, which allows an attacker with SNMP write privileges to execute commands as root on the eNodeB. Affected software: AirVeloci...

CVE-2022-36308

Airspan AirVelocity 1500 web management UI displays SNMP credentials in plaintext on software versions older than 15.18.00.2511, and stores SNMPv3 credentials unhashed on the filesystem, enabling anyone with web access to use these credentials to manipulate the eNodeB over SNMP. This issue may...

CVE-2022-36308

The CVE-2022-36308 entry affects Airspan AirVelocity 1500 (web management UI). The root cause is that SNMP credentials are exposed: plaintext in the management UI for versions earlier than 15.18.00.2511 and SNMPv3 credentials stored unhashed on the filesystem, enabling anyone with web access to u...

CVE-2022-36307

The AirVelocity 1500 prints SNMP credentials on its physically accessible serial port during boot. This was fixed in AirVelocity 1500 software version 15.18.00.2511 and may affect other AirVelocity and AirSpeed models...

CVE-2022-36307

The CVE-2022-36307 issue affects AirSpeed/AirVelocity devices, notably the AirVelocity 1500, which prints SNMP credentials on the physically accessible serial port during boot. Root cause: credentials exposed via boot-time serial output. Impact: exposure of SNMP credentials; CVSS indicates high c...

Airspan AirVelocity 1500 安全漏洞

The Airspan AirVelocity 1500 is a revolutionary indoor high-performance small cell from Airspan USA. Designed to bring public access LTE networks to indoor spaces A security vulnerability exists in versions prior to Airspan AirVelocity 1500 15.18.00.2511 that stems from its web management UI...

PT-2022-23306 · Airspan · Airvelocity 1500

Name of the Vulnerable Software and Affected Versions: Airspan AirVelocity 1500 software prior to version 15.18.00.2511 Description: The issue allows an attacker with SNMP write abilities to execute commands as root on the eNodeB due to NET-SNMP-EXTEND-MIB being enabled on its snmpd service. This...

PT-2022-23302 · Airspeed +1 · Airspeed +1

Name of the Vulnerable Software and Affected Versions: AirVelocity 1500 versions prior to 15.18.00.2511 Other AirVelocity and AirSpeed models affected versions not specified Description: The issue concerns the printing of SNMP credentials on the physically accessible serial port during boot. This...

DSA-5209-1 net-snmp - security update

Bulletin has no description...

PT-2022-37179 · Net Snmp · Net-Snmp

Name of the Vulnerable Software and Affected Versions: netsnmp affected versions not specified Description: The issue is related to a heap-buffer-overflow read. Technical details include the netsnmp memdup function and the file snmp api fuzzer.c. Recommendations: At the moment, there is no...

[SECURITY] Fedora 36 Update: net-snmp-5.9.3-1.fc36

SNMP Simple Network Management Protocol is a protocol used for network management. The NET-SNMP project includes various SNMP tools: an extensible agent, an SNMP library, tools for requesting or setting information from SNMP agents, tools for generating and handling SNMP traps, a version of the...

Fedora: Security Advisory for net-snmp (FEDORA-2022-3af7a32fc0)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Vulnerabilities fixed in Net-SNMP

Vulnerabilities have been fixed in Net-SNMP. The vulnerabilities allow an authenticated malicious party to cause a denial-of-service or potentially execute arbitrary code execute arbitrary code with the privileges under which Net-SNMP is running. This requires malicious network traffic must be se...

Ubuntu: Security Advisory (USN-5543-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-5543-1 net-snmp vulnerabilities

Yu Zhang and Nanyu Zhong discovered that Net-SNMP incorrectly handled memory operations when processing certain requests. A remote attacker could use this issue to cause Net-SNMP to crash, resulting in a denial of service, or possibly execute arbitrary code...

USN-5543-1: Net-SNMP vulnerabilities

Yu Zhang and Nanyu Zhong discovered that Net-SNMP incorrectly handled memory operations when processing certain requests. A remote attacker could use this issue to cause Net-SNMP to crash, resulting in a denial of service, or possibly execute arbitrary code...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Net-SNMP vulnerabilities (USN-5543-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5543-1 advisory. Yu Zhang and Nanyu Zhong discovered that Net-SNMP incorrectly handled memory operations when processing certain requests. A remot...