What is CVE-2022-36306?

CVE-2022-36306 is a medium-severity vulnerability in Airspan Airvelocity, classified under CWE-219. CVSS score: 6.5/10. Published 2022-08-16.

How severe is CVE-2022-36306?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Vulnerability in Airspan Airvelocity

CVE-2022-36306

An authenticated attacker can enumerate and download sensitive files, including the eNodeB's web management UI's TLS private key, the web server binary, and the web server configuration file. These vulnerabilities were found in AirVelocity…

EPSS: 0.008 (53.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Affected products

Airspan Airvelocity — versions unspecified
Airspan Airvelocity_1500
Airspan Airvelocity_1500_firmware

Weakness classification (CWE)

References

cve-assign@fb.com (Vendor Advisory, Permissions Required, x_refsource_CONFIRM)
cve-assign@fb.com (Exploit, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2022-36306?: CVE-2022-36306 is a medium-severity vulnerability in Airspan Airvelocity, classified under CWE-219. CVSS score: 6.5/10. Published 2022-08-16.
How severe is CVE-2022-36306?: Medium severity. CVSS v3 base score is 6.5 out of 10.