An authenticated attacker can enumerate and download sensitive files, including the eNodeB's web management UI's TLS private key, the web server binary, and the web server configuration file. These vulnerabilities were found in AirVelocity 1500 running software version 9.3.0.01249, were still present in 15.18.00.2511, and may affect other AirVelocity and AirSpeed models.
References
Link | Resource |
---|---|
https://github.com/metaredteam/external-disclosures/security/advisories/GHSA-9v93-3qpc-hxj9 | Exploit Third Party Advisory |
https://helpdesk.airspan.com/browse/TRN3-1691 | Permissions Required Vendor Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: facebook
Published: 2022-08-16T00:32:07
Updated: 2022-08-16T00:32:07
Reserved: 2022-07-19T00:00:00
Link: CVE-2022-36306
JSON object: View
NVD Information
Status : Modified
Published: 2022-08-16T01:15:13.003
Modified: 2023-11-07T03:49:35.673
Link: CVE-2022-36306
JSON object: View
Redhat Information
No data.