Medium severity6.5NVD Advisory· Published Aug 16, 2022· Updated Jun 17, 2026
CVE-2022-36306
CVE-2022-36306
Description
An authenticated attacker can enumerate and download sensitive files, including the eNodeB's web management UI's TLS private key, the web server binary, and the web server configuration file. These vulnerabilities were found in AirVelocity 1500 running software version 9.3.0.01249, were still present in 15.18.00.2511, and may affect other AirVelocity and AirSpeed models.
Affected products
3- cpe:2.3:o:airspan:airvelocity_1500_firmware:*:*:*:*:*:*:*:*Range: >=9.3.0.01249,<=15.18.00.2511
9.3.0.01249, 15.18.00.2511+ 1 more
- (no CPE)range: 9.3.0.01249, 15.18.00.2511
- (no CPE)range: unspecified
Patches
Vulnerability mechanics
References
2- github.com/metaredteam/external-disclosures/security/advisories/GHSA-9v93-3qpc-hxj9nvdExploitThird Party Advisory
- helpdesk.airspan.com/browse/TRN3-1691nvdPermissions RequiredVendor Advisory
News mentions
0No linked articles in our index yet.