8.8
CVE-2022-36310
- EPSS 0.81%
- Veröffentlicht 16.08.2022 01:15:13
- Zuletzt bearbeitet 21.11.2024 07:12:45
- Quelle cve-assign@fb.com
- Teams Watchlist Login
- Unerledigt Login
Airspan AirVelocity 1500 software prior to version 15.18.00.2511 had NET-SNMP-EXTEND-MIB enabled on its snmpd service, enabling an attacker with SNMP write abilities to execute commands as root on the eNodeB. This issue may affect other AirVelocity and AirSpeed models.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Airspan ≫ Airvelocity 1500 Firmware Version >= 9.3.0.01249 <= 15.18.00.2511
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.81% | 0.733 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 8.8 | 2.8 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
CWE-242 Use of Inherently Dangerous Function
The product calls a function that can never be guaranteed to work safely.