CVE-2022-36311

2022-08-1600:34:12

CWE-79

facebook

www.cve.org

airspan snmp injection airvelocity airspeed vulnerability

0.001 Low

EPSS

Percentile

31.3%

JSON

Airspan AirVelocity 1500 prior to software version 15.18.00.2511 is vulnerable to injection leading to XSS in the SNMP community field in the eNodeB’s web management UI. This issue may affect other AirVelocity and AirSpeed models.

CNA Affected

[
  {
    "product": "AirVelocity",
    "vendor": "Airspan",
    "versions": [
      {
        "lessThan": "15.18.00.2511",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

helpdesk.airspan.com/browse/TRN3-1694

0.001 Low

EPSS

Percentile

31.3%

JSON

Related for CVELIST:CVE-2022-36311