NetSight
high8.8

CVE-2022-36312

Airspan AirVelocity 1500 software version 15.18.00.2511 lacks CSRF protections in the eNodeB's web management UI.

Impact

Airspan AirVelocity 1500 software version 15.18.00.2511 lacks CSRF protections in the eNodeB's web management UI. This issue may affect other AirVelocity and AirSpeed models.

Affected products

VendorProductAffected versions
AirspanAirvelocity 1500 Firmware
Version 15.18.00.2511

Weakness classification

References