Vulnerabilities > Airspan > High

DATE CVE VULNERABILITY TITLE RISK
2022-08-16 CVE-2022-36309 OS Command Injection vulnerability in Airspan Airvelocity 1500 Firmware 15.18.00.2511/9.3.0.01249
Airspan AirVelocity 1500 software versions prior to 15.18.00.2511 have a root command injection vulnerability in the ActiveBank parameter of the recoverySubmit.cgi script running on the eNodeB's web management UI.
network
low complexity
airspan CWE-78
8.8
2022-08-16 CVE-2022-36310 Unspecified vulnerability in Airspan Airvelocity 1500 Firmware 15.18.00.2511/9.3.0.01249
Airspan AirVelocity 1500 software prior to version 15.18.00.2511 had NET-SNMP-EXTEND-MIB enabled on its snmpd service, enabling an attacker with SNMP write abilities to execute commands as root on the eNodeB.
network
low complexity
airspan
8.8
2022-08-16 CVE-2022-36312 Cross-Site Request Forgery (CSRF) vulnerability in Airspan Airvelocity 1500 Firmware 15.18.00.2511
Airspan AirVelocity 1500 software version 15.18.00.2511 lacks CSRF protections in the eNodeB's web management UI.
network
low complexity
airspan CWE-352
8.8
2022-08-08 CVE-2022-36265 Unspecified vulnerability in Airspan Airspot 5410 Firmware 0.3.4.14
In Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists a Hidden system command web page.
network
low complexity
airspan
7.2
2022-02-18 CVE-2022-0138 Deserialization of Untrusted Data vulnerability in Airspan products
MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 has a deserialization function that does not validate or check the data, allowing arbitrary classes to be created.
network
low complexity
airspan CWE-502
7.5
2022-02-18 CVE-2022-21176 SQL Injection vulnerability in Airspan products
MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 does not properly sanitize user input, which may allow an attacker to perform a SQL injection and obtain sensitive information.
network
low complexity
airspan CWE-89
7.5