Design/Logic Flaw

2022-08-1601:15:00

PRIOn knowledge base

www.prio-n.com

airspan

airvelocity 1500

injection

xss

snmp

web management

vulnerability

airspeed model

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.3%

JSON

Airspan AirVelocity 1500 prior to software version 15.18.00.2511 is vulnerable to injection leading to XSS in the SNMP community field in the eNodeB’s web management UI. This issue may affect other AirVelocity and AirSpeed models.

CPENameOperatorVersion
airvelocity_1500_firmwarelt15.18.00.2511

CPE	Name	Operator	Version
	airvelocity_1500_firmware	lt	15.18.00.2511

References

helpdesk.airspan.com/browse/TRN3-1694