VULNERABILITY INTELLIGENCE

CVE-2022-36311

CVSS score6.1 MEDIUM
EPSS probability0.45%
CISA KEVNot currently listed
Published2022-08-16
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Description

Airspan AirVelocity 1500 prior to software version 15.18.00.2511 is vulnerable to injection leading to XSS in the SNMP community field in the eNodeB's web management UI. This issue may affect other AirVelocity and AirSpeed models.

Weakness classification

  • cve-assign@fb.com: CWE-79
  • nvd@nist.gov: CWE-79

Primary references