← Back

CVE-2022-36310

nvd nist
Published: Aug 16, 2022Modified: Jun 17, 2026

JSON object

Loading...
8.8
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: NVD

Description

Airspan AirVelocity 1500 software prior to version 15.18.00.2511 had NET-SNMP-EXTEND-MIB enabled on its snmpd service, enabling an attacker with SNMP write abilities to execute commands as root on the eNodeB. This issue may affect other AirVelocity and AirSpeed models.

Affected (1)

Airspan
1 product
Airvelocity 1500 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Airvelocity 1500 Firmware
From 9.3.0.01249 to 15.18.00.2511
Running on/withPlatform Versions
Airspan
Airvelocity 1500
All versions

Related CWEs

CWE-242
Use of Inherently Dangerous Function
The product calls a function that can never be guaranteed to work safely.

References (4)

Source: cve-assign@fb.com
ExploitThird Party Advisory
Source: cve-assign@fb.com
Permissions RequiredVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Permissions RequiredVendor Advisory

Timeline

No history available yet.