Vulnerability in Airspan Airvelocity
CVE-2022-36306
An authenticated attacker can enumerate and download sensitive files, including the eNodeB's web management UI's TLS private key, the web server binary, and the web server configuration file. These vulnerabilities were found in AirVelocity…
EPSS: 0.004 (58.0th percentile) — read the EPSS interpretation.
Affected products
- Airspan Airvelocity — versions unspecified
Weakness classification (CWE)
References
- helpdesk.airspan.com/browse/TRN3-1691 (x_refsource_CONFIRM)
- github.com/metaredteam/external-disclosures/security/advisories/GHSA-9v93-3qpc-… (x_refsource_MISC)