Known Vulnerabilities for products from Airspan
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Airspan".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2022-36312 | Airspan AirVelocity 1500 software version 15.18.00.2511 lacks CSRF protections in the eNodeB's web management UI. This issue ... | 8.8 - HIGH | 2022-08-16 | 2022-08-17 |
| CVE-2022-36311 | Airspan AirVelocity 1500 prior to software version 15.18.00.2511 is vulnerable to injection leading to XSS in the SNMP commun... | 6.1 - MEDIUM | 2022-08-16 | 2022-08-17 |
| CVE-2022-36310 | Airspan AirVelocity 1500 software prior to version 15.18.00.2511 had NET-SNMP-EXTEND-MIB enabled on its snmpd service, enabli... | 8.8 - HIGH | 2022-08-16 | 2022-08-17 |
| CVE-2022-36309 | Airspan AirVelocity 1500 software versions prior to 15.18.00.2511 have a root command injection vulnerability in the ActiveBa... | 8.8 - HIGH | 2022-08-16 | 2022-08-17 |
| CVE-2022-36308 | Airspan AirVelocity 1500 web management UI displays SNMP credentials in plaintext on software versions older than 15.18.00.25... | 9.1 - CRITICAL | 2022-08-16 | 2022-08-17 |
| CVE-2022-36307 | The AirVelocity 1500 prints SNMP credentials on its physically accessible serial port during boot. This was fixed in AirVeloc... | 6.8 - MEDIUM | 2022-08-16 | 2022-08-17 |
| CVE-2022-36306 | An authenticated attacker can enumerate and download sensitive files, including the eNodeB's web management UI's TLS private ... | 6.5 - MEDIUM | 2022-08-16 | 2023-11-07 |
| CVE-2022-36267 | In Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists a Unauthenticated remote command injection vulnerability. Th... | 9.8 - CRITICAL | 2022-08-08 | 2023-08-08 |
| CVE-2022-36266 | In Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists a stored XSS vulnerability. As the binary file /home/www/cgi... | 6.1 - MEDIUM | 2022-08-08 | 2022-10-26 |
| CVE-2022-36265 | In Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists a Hidden system command web page. After performing a reverse... | 7.2 - HIGH | 2022-08-08 | 2022-08-12 |
| CVE-2022-36264 | In Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists an Unauthenticated remote Arbitrary File Upload vulnerabilit... | 9.1 - CRITICAL | 2022-08-08 | 2022-08-12 |
| CVE-2022-21800 | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 6.5 - MEDIUM | 2022-02-18 | 2023-07-24 |
| CVE-2022-21215 | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 9.8 - CRITICAL | 2022-02-18 | 2022-02-26 |
| CVE-2022-21196 | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 9.8 - CRITICAL | 2022-02-18 | 2023-07-24 |
| CVE-2022-21176 | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 7.5 - HIGH | 2022-02-18 | 2022-02-26 |
| CVE-2022-21143 | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 9.8 - CRITICAL | 2022-02-18 | 2022-02-26 |
| CVE-2022-21141 | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 9.8 - CRITICAL | 2022-02-18 | 2022-02-26 |
| CVE-2022-0138 | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 7.5 - HIGH | 2022-02-18 | 2022-02-26 |
| CVE-2008-1543 | The Advanced User Interface Pages in the ProST Web Management component on the Airspan WiMAX ProST have a certain default Use... | 7.5 - HIGH | 2008-03-28 | 2017-08-08 |
| CVE-2008-1542 | Airspan Base Station Distribution Unit (BSDU) has "topsecret" as its password for the root account, which allows remote attac... | 7.5 - HIGH | 2008-03-28 | 2017-08-08 |