Unrated severityNVD Advisory· Published Aug 16, 2022· Updated Aug 3, 2024
CVE-2022-36306
CVE-2022-36306
Description
An authenticated attacker can enumerate and download sensitive files, including the eNodeB's web management UI's TLS private key, the web server binary, and the web server configuration file. These vulnerabilities were found in AirVelocity 1500 running software version 9.3.0.01249, were still present in 15.18.00.2511, and may affect other AirVelocity and AirSpeed models.
Affected products
2- Range: 9.3.0.01249 and 15.18.00.2511
- Airspan/AirVelocityv5Range: unspecified
Patches
Vulnerability mechanics
References
2- github.com/metaredteam/external-disclosures/security/advisories/GHSA-9v93-3qpc-hxj9mitrex_refsource_MISC
- helpdesk.airspan.com/browse/TRN3-1691mitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.