İçeriğe atla
Noroxi

Airspan kayıtları

airspan üreticisine ait 21 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
4
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 22

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

21 kayıt
  • CVE-2022-36267
    55Planlayın

    In Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists a Unauthenticated remote command injection vulnerability.

    KritikCVSS 9,8Kavram kanıtıEPSS %55

    airspan · airspot 5410 firmware8 Ağu 2022

  • CVE-2008-1262
    43Planlayın

    The administration panel on the Airspan WiMax ProST 4.1 antenna with 6.5.38.0 software does not verify authentication credentials, which all

    KritikCVSS 10,0Kavram kanıtıEPSS %9

    airspan · wimax prost10 Mar 2008

  • CVE-2022-36309
    42Planlayın

    Airspan AirVelocity 1500 software versions prior to 15.18.00.2511 have a root command injection vulnerability in the ActiveBank parameter of

    YüksekCVSS 8,8İstismar yokEPSS %25

    airspan · airvelocity 1500 firmware15 Ağu 2022

  • CVE-2022-21196
    40Planlayın

    Airspan Networks Mimosa Improper Authorization

    KritikCVSS 9,8İstismar yokEPSS %4

    airspan · mimosa management platform18 Şub 2022

  • CVE-2022-21141
    40Planlayın

    Airspan Networks Mimosa Incorrect Authorization

    KritikCVSS 9,8İstismar yokEPSS %3

    airspan · mimosa management platform18 Şub 2022

  • CVE-2022-21215
    39İzleyin

    Airspan Networks Mimosa Server-Side Request Forgery (SSRF)

    KritikCVSS 9,8İstismar yokEPSS %1

    airspan · mimosa management platform18 Şub 2022

  • CVE-2022-21143
    39İzleyin

    Airspan Networks Mimosa OS Command Injection

    KritikCVSS 9,8İstismar yokEPSS %1

    airspan · mimosa management platform18 Şub 2022

  • CVE-2022-36264
    36İzleyin

    In Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists an Unauthenticated remote Arbitrary File Upload vulnerability which allows

    KritikCVSS 9,1İstismar yokEPSS %2

    airspan · airspot 5410 firmware8 Ağu 2022

  • CVE-2022-36308
    36İzleyin

    Airspan AirVelocity 1500 web management UI displays SNMP credentials in plaintext on software versions older than 15.18.00.2511, and stores

    KritikCVSS 9,1İstismar yokEPSS %1

    airspan · airvelocity 1500 firmware15 Ağu 2022

  • CVE-2022-36310
    35İzleyin

    Airspan AirVelocity 1500 software prior to version 15.18.00.2511 had NET-SNMP-EXTEND-MIB enabled on its snmpd service, enabling an attacker

    YüksekCVSS 8,8İstismar yokEPSS %2

    airspan · airvelocity 1500 firmware15 Ağu 2022

  • CVE-2022-36312
    35İzleyin

    Airspan AirVelocity 1500 software version 15.18.00.2511 lacks CSRF protections in the eNodeB's web management UI.

    YüksekCVSS 8,8İstismar yokEPSS %0

    airspan · airvelocity 1500 firmware15 Ağu 2022

  • CVE-2008-1542
    31İzleyin

    Airspan Base Station Distribution Unit (BSDU) has "topsecret" as its password for the root account, which allows remote attackers to obtain

    YüksekCVSS 7,5İstismar yokEPSS %2

    airspan · base station distribution unit28 Mar 2008

  • CVE-2008-1543
    30İzleyin

    The Advanced User Interface Pages in the ProST Web Management component on the Airspan WiMAX ProST have a certain default User ID and passwo

    YüksekCVSS 7,5İstismar yokEPSS %1

    airspan · easy st28 Mar 2008

  • CVE-2022-21176
    30İzleyin

    Airspan Networks Mimosa SQL Injection

    YüksekCVSS 7,5İstismar yokEPSS %1

    airspan · mimosa management platform18 Şub 2022

  • CVE-2022-0138
    30İzleyin

    Airspan Networks Mimosa Deserialization of Untrusted Data

    YüksekCVSS 7,5İstismar yokEPSS %1

    airspan · mimosa management platform18 Şub 2022

  • CVE-2022-36265
    28İzleyin

    In Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists a Hidden system command web page.

    YüksekCVSS 7,2İstismar yokEPSS %1

    airspan · airspot 5410 firmware8 Ağu 2022

  • CVE-2022-36307
    27İzleyin

    The AirVelocity 1500 prints SNMP credentials on its physically accessible serial port during boot.

    OrtaCVSS 6,8İstismar yokEPSS %0

    airspan · airvelocity 1500 firmware15 Ağu 2022

  • CVE-2022-36306
    26İzleyin

    An authenticated attacker can enumerate and download sensitive files, including the eNodeB's web management UI's TLS private key, the web se

    OrtaCVSS 6,5İstismar yokEPSS %1

    airspan · airvelocity 1500 firmware15 Ağu 2022

  • CVE-2022-21800
    26İzleyin

    Airspan Networks Mimosa Use of a Broken or Risky Cryptographic Algorithm

    OrtaCVSS 6,5İstismar yokEPSS %1

    airspan · mimosa management platform18 Şub 2022

  • CVE-2022-36266
    24İzleyin

    In Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists a stored XSS vulnerability.

    OrtaCVSS 6,1İstismar yokEPSS %1

    airspan · airspot 5410 firmware8 Ağu 2022

  • CVE-2022-36311
    24İzleyin

    Airspan AirVelocity 1500 prior to software version 15.18.00.2511 is vulnerable to injection leading to XSS in the SNMP community field in th

    OrtaCVSS 6,1İstismar yokEPSS %0

    airspan · airvelocity 1500 firmware15 Ağu 2022