CVEvulnerability
CVE-2022-36307
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2022-08-16
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.8 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-522
Description
The AirVelocity 1500 prints SNMP credentials on its physically accessible serial port during boot. This was fixed in AirVelocity 1500 software version 15.18.00.2511 and may affect other AirVelocity and AirSpeed models.
Affected configurations
• airspan airvelocity 1500 firmware (>= 9.3.0.01249 <= 15.18.00.2511)
Related
Weakness · CWE (1)
- CWE-522 Insufficiently Protected Credentials weakness
References
- https://github.com/metaredteam/external-disclosures/security/advisories/GHSA-8j75-qh6c-wpc5 Third Party Advisory
- https://helpdesk.airspan.com/browse/TRN3-1693 Permissions Required, Vendor Advisory
- https://github.com/metaredteam/external-disclosures/security/advisories/GHSA-8j75-qh6c-wpc5 Third Party Advisory
- https://helpdesk.airspan.com/browse/TRN3-1693 Permissions Required, Vendor Advisory