CVE-2022-36312

8.8 highEPSS 0.3%

High (8.8) in airspan airvelocity 1500 firmware. EPSS 0.3% chance of exploitation in the next 30 days.

Airspan AirVelocity 1500 software version 15.18.00.2511 lacks CSRF protections in the eNodeB's web management UI. This issue may affect other AirVelocity and AirSpeed models.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 27% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2022-08-16
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

airspan:airvelocity_1500_firmware

References

https://helpdesk.airspan.com/browse/TRN3-1695
https://helpdesk.airspan.com/browse/TRN3-1695

Check your stack JSON