PT-2022-23307
CVE-2022-36311
·
تاريخ النشر
2022-08-16
·
تاريخ التحديث
2022-08-17
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Airspan AirVelocity 1500 versions prior to 15.18.00.2511
Description
The issue is related to injection leading to XSS in the SNMP community field in the eNodeB's web management UI. This may also affect other AirVelocity and AirSpeed models.
Recommendations
For Airspan AirVelocity 1500 versions prior to 15.18.00.2511, update to software version 15.18.00.2511 or later to resolve the issue. As a temporary workaround, consider restricting access to the SNMP community field in the eNodeB's web management UI to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾