8.8

CVE-2022-36310

Exploit
Airspan AirVelocity 1500 software prior to version 15.18.00.2511 had NET-SNMP-EXTEND-MIB enabled on its snmpd service, enabling an attacker with SNMP write abilities to execute commands as root on the eNodeB. This issue may affect other AirVelocity and AirSpeed models.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Airspan ≫ Airvelocity 1500 Firmware Version >= 9.3.0.01249 <= 15.18.00.2511
   Airspan ≫ Airvelocity 1500 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.81% 0.735
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-242 Use of Inherently Dangerous Function

The product calls a function that can never be guaranteed to work safely.

https://helpdesk.airspan.com/browse/TRN3-1689
Vendor Advisory
Permissions Required