CVE-2022-36312CWE-352

CVE-2022-36312: vulnerability in Airspan AirVelocity

Published · Updated

Follow this CVE+ Monitor AirVelocity

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.3%
Airspan AirVelocity 1500 software version 15.18.00.2511 lacks CSRF protections in the eNodeB's web management UI. This issue may affect other AirVelocity and AirSpeed models.
Affected products
Airspan · AirVelocity
Related CVEs — Airspan AirVelocity

In the same product, most dangerous first.

CVE-2022-36309—CVE-2022-36309EPSS 25.2%CVE-2022-36310—CVE-2022-36310EPSS 1.6%CVE-2022-36306—CVE-2022-36306EPSS 1.0%CVE-2022-36308—CVE-2022-36308EPSS 0.8%CVE-2022-36311—CVE-2022-36311EPSS 0.5%CVE-2022-36307—CVE-2022-36307EPSS 0.3%