Lucene search
PRIOn knowledge basePRION:CVE-2022-36308HistoryAug 16, 2022 - 1:15 a.m.
Code injection
2022-08-1601:15:00
PRIOn knowledge base
www.prio-n.com
7
code injection
airspan
airvelocity
snmp
plaintext
credentials
snmpv3
filesystem
enodeb
web access
airspeed
nvd
Airspan AirVelocity 1500 web management UI displays SNMP credentials in plaintext on software versions older than 15.18.00.2511, and stores SNMPv3 credentials unhashed on the filesystem, enabling anyone with web access to use these credentials to manipulate the eNodeB over SNMP. This issue may affect other AirVelocity and AirSpeed models.
| CPE | Name | Operator | Version |
|---|---|---|---|
| airvelocity_1500_firmware | ge | 9.3.0.01249 | |
| airvelocity_1500_firmware | le | 15.18.00.2511 |
Related
cve
cve
CVE-2022-36308
2022-08-16 01:15:13
nvd
nvd
CVE-2022-36308
2022-08-16 01:15:13
cvelist
cvelist
CVE-2022-36308
2022-08-16 00:32:57