Skip to content
Airspan vulnerabilities
Newest
-
airspan airvelocity, airvelocity 1500 firmware +1 more
Airspan AirVelocity 1500 software version 15.18.00.2511 lacks CSRF protections in the eNodeB's...
CVE-2022-36312
8.8 High
-
airspan airvelocity, airvelocity 1500 firmware +1 more
Airspan AirVelocity 1500 prior to software version 15.18.00.2511 is vulnerable to injection...
CVE-2022-36311
6.1 Medium
-
airspan airvelocity, airvelocity 1500 firmware +1 more
Airspan AirVelocity 1500 software prior to version 15.18.00.2511 had NET-SNMP-EXTEND-MIB enabled on its snmpd service, enabling an attacker with SNMP write abilities to execute commands as root on the…
CVE-2022-36310
8.8 High
-
airspan airvelocity, airvelocity 1500 firmware +1 more
Airspan AirVelocity 1500 software versions prior to 15.18.00.2511 have a root command injection vulnerability in the ActiveBank parameter of the recoverySubmit.cgi script running on the eNodeB's web m…
CVE-2022-36309
EPSS 25.2%
8.8 High
-
airspan airvelocity, airvelocity 1500 firmware +1 more
Airspan AirVelocity 1500 web management UI displays SNMP credentials in plaintext on software versions older than 15.18.00.2511, and stores SNMPv3 credentials unhashed on the filesystem, enabling anyo…
CVE-2022-36308
9.1 Critical
-
airspan airvelocity, airvelocity 1500 firmware +1 more
The AirVelocity 1500 prints SNMP credentials on its physically accessible serial port during boot. This was fixed in AirVelocity 1500 software version 15.18.00.2511 and may affect other AirVelocity an…
CVE-2022-36307
6.8 Medium
-
airspan airvelocity, airvelocity 1500 firmware +1 more
An authenticated attacker can enumerate and download sensitive files, including the eNodeB's web management UI's TLS private key, the web server binary, and the web server configuration file. These vu…
CVE-2022-36306
6.5 Medium
-
airspan airspot 5410 firmware
In Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists an Unauthenticated remote...
CVE-2022-36264
9.1 Critical
-
airspan airspot 5410 firmware
In Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists a Hidden system command web page...
CVE-2022-36265
7.2 High
-
airspan airspot 5410 firmware
In Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists a stored XSS vulnerability. As...
CVE-2022-36266
6.1 Medium
-
airspan airspot 5410 firmware
In Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists a Unauthenticated remote command...
CVE-2022-36267
Public exploit
EPSS 54.1%
9.8 Critical
-
airspan networks mmp, ptmp c-series and a5x, ptp c-series +5 more +7 more
Airspan Networks Mimosa SQL Injection
CVE-2022-21176
8.6 High
-
airspan networks mmp, ptmp c-series and a5x, ptp c-series +5 more +7 more
Airspan Networks Mimosa Incorrect Authorization
CVE-2022-21141
10.0 Critical
-
airspan networks mmp, ptmp c-series and a5x, ptp c-series +5 more +7 more
Airspan Networks Mimosa OS Command Injection
CVE-2022-21143
7.5 High
-
airspan networks mmp, ptmp c-series and a5x, ptp c-series +5 more +7 more
Airspan Networks Mimosa Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-21800
6.5 Medium
-
airspan networks mmp, ptmp c-series and a5x, ptp c-series +5 more +7 more
Airspan Networks Mimosa Deserialization of Untrusted Data
CVE-2022-0138
7.5 High
-
airspan networks mmp, ptmp c-series and a5x, ptp c-series +5 more +7 more
Airspan Networks Mimosa Improper Authorization
CVE-2022-21196
10.0 Critical
-
airspan networks mmp, ptmp c-series and a5x, ptp c-series +5 more +7 more
Airspan Networks Mimosa Server-Side Request Forgery (SSRF)
CVE-2022-21215
10.0 Critical
-
airspan prost web management
The Advanced User Interface Pages in the ProST Web Management component on the Airspan WiMAX...
CVE-2008-1543
7.5 High
-
airspan base station distribution unit
Airspan Base Station Distribution Unit (BSDU) has "topsecret" as its password for the root...
CVE-2008-1542
7.5 High
-
airspan wimax prost
The administration panel on the Airspan WiMax ProST 4.1 antenna with 6.5.38.0 software does not...
CVE-2008-1262
Public exploit
10.0 High