Airspan Airspot_5410_firmware
4 CVEs affecting Airspan Airspot_5410_firmware. Latest disclosed: 2022-08-08. Critical: 2, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-36267 | Critical | 9.8 | 2022-08-08 | In Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists a Unauthenticated remote command injection vulnerability. The ping functionality can be called… |
CVE-2022-36264 | Critical | 9.1 | 2022-08-08 | In Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists an Unauthenticated remote Arbitrary File Upload vulnerability which allows overwriting arbitra… |
CVE-2022-36265 | High | 7.2 | 2022-08-08 | In Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists a Hidden system command web page. After performing a reverse engineering of the firmware, it w… |
CVE-2022-36266 | Medium | 6.1 | 2022-08-08 | In Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists a stored XSS vulnerability. As the binary file /home/www/cgi-bin/login.cgi does not check if t… |