Vulnerability in Airspan Airvelocity
CVE-2022-36308
Airspan AirVelocity 1500 web management UI displays SNMP credentials in plaintext on software versions older than 15.18.00.2511, and stores SNMPv3 credentials unhashed on the filesystem, enabling anyone with web access to use these credent…
EPSS: 0.003 (49.7th percentile) — read the EPSS interpretation.
Affected products
- Airspan Airvelocity — versions unspecified
Weakness classification (CWE)
References
- helpdesk.airspan.com/browse/TRN3-1692 (x_refsource_CONFIRM)
- github.com/metaredteam/external-disclosures/security/advisories/GHSA-qjgc-rx8m-… (x_refsource_MISC)