GCVE - cpe:2.3:h:airspan:airvelocity_1500:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:airspan:airvelocity_1500:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Airspan (`766899b4-cdae-5171-a209-ec900f41395f`)
Product	Airvelocity 1500 (`9e1ab0dc-f831-5c51-83b0-fbddf60ae877`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-36312`	not_vulnerable	2026-06-08 05:46:06.542098	Details available Airspan AirVelocity 1500 software version 15.18.00.2511 lacks CSRF protections in the eNodeB's web management UI. This issue may affect other AirVelocity and AirSpeed models. Published: 2022-08-16T00:34:33.000Z Updated: 2024-08-03T10:00:04.350Z Open on db.gcve.eu Reference links https://helpdesk.airspan.com/browse/TRN3-1695	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-36311`	not_vulnerable	2026-06-08 05:46:06.538879	Details available Airspan AirVelocity 1500 prior to software version 15.18.00.2511 is vulnerable to injection leading to XSS in the SNMP community field in the eNodeB's web management UI. This issue may affect other AirVelocity and AirSpeed models. Published: 2022-08-16T00:34:12.000Z Updated: 2024-08-03T10:00:04.384Z Open on db.gcve.eu Reference links https://helpdesk.airspan.com/browse/TRN3-1694	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-36310`	not_vulnerable	2026-06-08 05:46:06.538284	Details available Airspan AirVelocity 1500 software prior to version 15.18.00.2511 had NET-SNMP-EXTEND-MIB enabled on its snmpd service, enabling an attacker with SNMP write abilities to execute commands as root on the eNodeB. This issue may affect other AirVelocity and AirSpeed models. Published: 2022-08-16T00:33:45.000Z Updated: 2024-08-03T10:00:04.322Z Open on db.gcve.eu Reference links https://helpdesk.airspan.com/browse/TRN3-1689 https://github.com/metaredteam/external-disclosures/security/advisories/GHSA-whc6-2989-42xm	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-36309`	not_vulnerable	2026-06-08 05:46:06.537828	Details available Airspan AirVelocity 1500 software versions prior to 15.18.00.2511 have a root command injection vulnerability in the ActiveBank parameter of the recoverySubmit.cgi script running on the eNodeB's web management UI. This issue may affect other AirVelocity and AirSpeed models. Published: 2022-08-16T00:33:24.000Z Updated: 2024-08-03T10:00:04.309Z Open on db.gcve.eu Reference links https://helpdesk.airspan.com/browse/TRN3-1690 https://github.com/metaredteam/external-disclosures/security/advisories/GHSA-p295-2jh6-g6g4	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-36308`	not_vulnerable	2026-06-08 05:46:06.537489	Details available Airspan AirVelocity 1500 web management UI displays SNMP credentials in plaintext on software versions older than 15.18.00.2511, and stores SNMPv3 credentials unhashed on the filesystem, enabling anyone with web access to use these credentials to manipulate the eNodeB over SNMP. This issue may affect other AirVelocity and AirSpeed models. Published: 2022-08-16T00:32:57.000Z Updated: 2024-08-03T10:00:04.241Z Open on db.gcve.eu Reference links https://helpdesk.airspan.com/browse/TRN3-1692 https://github.com/metaredteam/external-disclosures/security/advisories/GHSA-qjgc-rx8m-q58x	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-36307`	not_vulnerable	2026-06-08 05:46:06.536844	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-36306`	not_vulnerable	2026-06-08 05:46:06.536413	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.