What is CVE-2022-36307?

CVE-2022-36307 is a medium-severity vulnerability in Airspan Airvelocity, classified under Insufficiently Protected Credentials. CVSS score: 6.8/10. Published 2022-08-16.

How severe is CVE-2022-36307?

Medium severity. CVSS v3 base score is 6.8 out of 10.

Vulnerability in Airspan Airvelocity

CVE-2022-36307

The AirVelocity 1500 prints SNMP credentials on its physically accessible serial port during boot. This was fixed in AirVelocity 1500 software version 15.18.00.2511 and may affect other AirVelocity and AirSpeed models.

Published 2022-08-16 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 6.8 (Medium). Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

EPSS exploit prediction

EPSS: 0.003 (22.3th percentile), scored 2026-10-23.

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 22nd percentile — 22.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.003 · newest: 0.003 · change: 0.000

Affected products

Airspan Airvelocity — versions unspecified
Airspan Airvelocity 1500
Airspan Airvelocity 1500 Firmware

Weakness classification (CWE)

CWE-522 — Insufficiently Protected Credentials

References

helpdesk.airspan.com/browse/TRN3-1693 (Vendor Advisory, Permissions Required)
github.com/metaredteam/external-disclosures/security/advisories/GHSA-8j75-qh6c-… (Third Party Advisory)

Frequently asked questions

What is CVE-2022-36307?: CVE-2022-36307 is a medium-severity vulnerability in Airspan Airvelocity, classified under Insufficiently Protected Credentials. CVSS score: 6.8/10. Published 2022-08-16.
How severe is CVE-2022-36307?: Medium severity. CVSS v3 base score is 6.8 out of 10.