CVE-2022-36310

HIGH Year: 2022
CVSS v3 Score
8.8
High
Weakness Type
CWE-242
View all →

Vulnerability Description

Airspan AirVelocity 1500 software prior to version 15.18.00.2511 had NET-SNMP-EXTEND-MIB enabled on its snmpd service, enabling an attacker with SNMP write abilities to execute commands as root on the eNodeB. This issue may affect other AirVelocity and AirSpeed models.

Related Vulnerabilities

CVE-2017-0904

HIGH
CVSS:8.1(High)

The private_address_check ruby gem before 0.4.0 is vulnerable to a bypass due to use of Ruby's Resolv.getaddresses method, which is OS-dependent and should not be relied upon for security measures, su...

CWE-2422017

CVE-2017-1002157

CRITICAL
CVSS:9.8(Critical)

modulemd 1.3.1 and earlier uses an unsafe function for processing externally provided data, leading to remote code execution.

CWE-2422017

CVE-2024-52324

CRITICAL
CVSS:9.8(Critical)

Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x uses an inherently dangerous function which could allow an attacker to send a malicious MQTT message resulting in devices executing arb...

CWE-2422024

CVE-2021-42543

HIGH
CVSS:7.8(High)

The affected application uses specific functions that could be abused through a crafted project file, which could lead to code execution, system reboot, and system shutdown.

CWE-2422021

CVE-2025-1331

HIGH
CVSS:7.8(High)

IBM CICS TX Standard 11.1 and IBM CICS TX Advanced 10.1 and 11.1 could allow a local user to execute arbitrary code on the system due to the use of unsafe use of the gets function.

CWE-2422025

CVE-2021-40698

HIGH
CVSS:7.4(High)

ColdFusion version 2021 update 1 (and earlier) and versions 2018.10 (and earlier) are impacted by an Use of Inherently Dangerous Function vulnerability that can lead to a security feature bypass . An ...

CWE-2422021