GCVE - cpe:2.3:a:airspan:airvelocity:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:airspan:airvelocity:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Airspan (`766899b4-cdae-5171-a209-ec900f41395f`)
Product	Airvelocity (`0923953e-bf44-55f4-81cb-a4a604d59e9b`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-36312`	vulnerable	2026-06-08 05:46:06.539149	Details available Airspan AirVelocity 1500 software version 15.18.00.2511 lacks CSRF protections in the eNodeB's web management UI. This issue may affect other AirVelocity and AirSpeed models. Published: 2022-08-16T00:34:33.000Z Updated: 2024-08-03T10:00:04.350Z Open on db.gcve.eu Reference links https://helpdesk.airspan.com/browse/TRN3-1695	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-36311`	vulnerable	2026-06-08 05:46:06.538695	Details available Airspan AirVelocity 1500 prior to software version 15.18.00.2511 is vulnerable to injection leading to XSS in the SNMP community field in the eNodeB's web management UI. This issue may affect other AirVelocity and AirSpeed models. Published: 2022-08-16T00:34:12.000Z Updated: 2024-08-03T10:00:04.384Z Open on db.gcve.eu Reference links https://helpdesk.airspan.com/browse/TRN3-1694	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-36310`	vulnerable	2026-06-08 05:46:06.538091	Details available Airspan AirVelocity 1500 software prior to version 15.18.00.2511 had NET-SNMP-EXTEND-MIB enabled on its snmpd service, enabling an attacker with SNMP write abilities to execute commands as root on the eNodeB. This issue may affect other AirVelocity and AirSpeed models. Published: 2022-08-16T00:33:45.000Z Updated: 2024-08-03T10:00:04.322Z Open on db.gcve.eu Reference links https://helpdesk.airspan.com/browse/TRN3-1689 https://github.com/metaredteam/external-disclosures/security/advisories/GHSA-whc6-2989-42xm	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-36309`	vulnerable	2026-06-08 05:46:06.537772	Details available Airspan AirVelocity 1500 software versions prior to 15.18.00.2511 have a root command injection vulnerability in the ActiveBank parameter of the recoverySubmit.cgi script running on the eNodeB's web management UI. This issue may affect other AirVelocity and AirSpeed models. Published: 2022-08-16T00:33:24.000Z Updated: 2024-08-03T10:00:04.309Z Open on db.gcve.eu Reference links https://helpdesk.airspan.com/browse/TRN3-1690 https://github.com/metaredteam/external-disclosures/security/advisories/GHSA-p295-2jh6-g6g4	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-36308`	vulnerable	2026-06-08 05:46:06.537257	Details available Airspan AirVelocity 1500 web management UI displays SNMP credentials in plaintext on software versions older than 15.18.00.2511, and stores SNMPv3 credentials unhashed on the filesystem, enabling anyone with web access to use these credentials to manipulate the eNodeB over SNMP. This issue may affect other AirVelocity and AirSpeed models. Published: 2022-08-16T00:32:57.000Z Updated: 2024-08-03T10:00:04.241Z Open on db.gcve.eu Reference links https://helpdesk.airspan.com/browse/TRN3-1692 https://github.com/metaredteam/external-disclosures/security/advisories/GHSA-qjgc-rx8m-q58x	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-36307`	vulnerable	2026-06-08 05:46:06.536782	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-36306`	vulnerable	2026-06-08 05:46:06.535082	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.