CVE-2022-36311

6.1 mediumEPSS 0.5%

Medium (6.1) in airspan airvelocity 1500 firmware. EPSS 0.5% chance of exploitation in the next 30 days.

Airspan AirVelocity 1500 prior to software version 15.18.00.2511 is vulnerable to injection leading to XSS in the SNMP community field in the eNodeB's web management UI. This issue may affect other AirVelocity and AirSpeed models.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 39% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2022-08-16
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

airspan:airvelocity_1500_firmware

References

https://helpdesk.airspan.com/browse/TRN3-1694
https://helpdesk.airspan.com/browse/TRN3-1694

Check your stack JSON