What is CVE-2022-36307?

CVE-2022-36307 is a medium-severity vulnerability in Airspan Airvelocity, classified under Insufficiently Protected Credentials. CVSS score: 6.8/10. Published 2022-08-16.

How severe is CVE-2022-36307?

Medium severity. CVSS v3 base score is 6.8 out of 10.

Vulnerability in Airspan Airvelocity

CVE-2022-36307

The AirVelocity 1500 prints SNMP credentials on its physically accessible serial port during boot. This was fixed in AirVelocity 1500 software version 15.18.00.2511 and may affect other AirVelocity and AirSpeed models.

EPSS: 0.003 (21.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.8 (Medium). Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Airspan Airvelocity — versions unspecified
Airspan Airvelocity_1500
Airspan Airvelocity_1500_firmware

Weakness classification (CWE)

CWE-522 — Insufficiently Protected Credentials

References

cve-assign@fb.com (Vendor Advisory, Permissions Required, x_refsource_CONFIRM)
cve-assign@fb.com (Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2022-36307?: CVE-2022-36307 is a medium-severity vulnerability in Airspan Airvelocity, classified under Insufficiently Protected Credentials. CVSS score: 6.8/10. Published 2022-08-16.
How severe is CVE-2022-36307?: Medium severity. CVSS v3 base score is 6.8 out of 10.