Cross site request forgery (csrf)

2022-08-1601:15:00

PRIOn knowledge base

www.prio-n.com

airspan

airvelocity

csrf

protection

enodeb

web management

airspeed

models

nvd

8.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.3%

JSON

Airspan AirVelocity 1500 software version 15.18.00.2511 lacks CSRF protections in the eNodeB’s web management UI. This issue may affect other AirVelocity and AirSpeed models.

CPENameOperatorVersion
airvelocity_1500_firmwareeq15.18.00.2511

CPE	Name	Operator	Version
	airvelocity_1500_firmware	eq	15.18.00.2511

References

helpdesk.airspan.com/browse/TRN3-1695