CVE-2022-36265 - CVE House
Back to Database
Status published High CVE-2022-36265

In Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists...

Vulnerability Description

In Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists a Hidden system command web page. After performing a reverse engineering of the firmware, it was discovered that a hidden page not listed in the administration management interface allows a user to execute Linux commands on the device with root privileges. An authenticated malicious threat actor can use this page to fully compromise the device.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-36265

Credits & Attribution

No credits recorded in the NVD database.

References

More from airspan

View All →
CVE-2022-36267
In Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists...
Critical 9.8
CVE-2022-36266
In Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists...
Medium 6.1
CVE-2022-36264
In Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists...
Critical 9.1
CVE-2008-1543
The Advanced User Interface Pages in the ProST Web Management...
High 7.5
CVE-2008-1542
Airspan Base Station Distribution Unit (BSDU) has "topsecret" as its...
High 7.5

Affected Vendor

Affected Software

airspot 5410 firmware
Vulnerable Versions:
0

Timeline

Official Publish: August 8th, 2022
Last Modified: August 3rd, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.