CVE-2022-36309

HIGH
STIX 2.1 vulnerability

Record summary

CVE-2022-36309 has a selected CVSS score of 8.8 (high).

Description

Airspan AirVelocity 1500 software versions prior to 15.18.00.2511 have a root command injection vulnerability in the ActiveBank parameter of the recoverySubmit.cgi script running on the eNodeB's web management UI. This issue may affect other AirVelocity and AirSpeed models.

Description source: CVE List

Affected products and versions

1
ProductSourceVersion range

AirVelocity

Browse Airspan / AirVelocity
CVE ListBefore 15.18.00.2511affected

References

2