https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-36312.htmlhttps://patchthecve.com/cve/CVE-2022-36312.htmlWed, 17 Jun 2026 04:53:12 +0000HIGH 8.8: Airspan AirVelocity 1500 software version 15.18.00.2511 lacks CSRF protections in the eNodeB's web management UI. This issue may affect other AirVelocity and AirSpeed models.https://patchthecve.com/cve/CVE-2022-36311.htmlhttps://patchthecve.com/cve/CVE-2022-36311.htmlWed, 17 Jun 2026 04:53:12 +0000MEDIUM 6.1: Airspan AirVelocity 1500 prior to software version 15.18.00.2511 is vulnerable to injection leading to XSS in the SNMP community field in the eNodeB's web management UI. This issue may affect other AirVelocity and AirSpeed models.https://patchthecve.com/cve/CVE-2022-36310.htmlhttps://patchthecve.com/cve/CVE-2022-36310.htmlWed, 17 Jun 2026 04:53:12 +0000HIGH 8.8: Airspan AirVelocity 1500 software prior to version 15.18.00.2511 had NET-SNMP-EXTEND-MIB enabled on its snmpd service, enabling an attacker with SNMP write abilities to execute commands as root on the eNodeB. This issue may affect other AirVelocity and AirSpeed models.https://patchthecve.com/cve/CVE-2022-36309.htmlhttps://patchthecve.com/cve/CVE-2022-36309.htmlWed, 17 Jun 2026 04:53:12 +0000HIGH 8.8: Airspan AirVelocity 1500 software versions prior to 15.18.00.2511 have a root command injection vulnerability in the ActiveBank parameter of the recoverySubmit.cgi script running on the eNodeB's web management UI. This issue may affect other AirVelocity and AirSpeed models.https://patchthecve.com/cve/CVE-2022-36308.htmlhttps://patchthecve.com/cve/CVE-2022-36308.htmlWed, 17 Jun 2026 04:53:12 +0000CRITICAL 9.1: Airspan AirVelocity 1500 web management UI displays SNMP credentials in plaintext on software versions older than 15.18.00.2511, and stores SNMPv3 credentials unhashed on the filesystem, enabling anyone with web access to use these credentials to manipulate the eNodeB over SNMP. This issue may affechttps://patchthecve.com/cve/CVE-2022-36307.htmlhttps://patchthecve.com/cve/CVE-2022-36307.htmlWed, 17 Jun 2026 04:53:11 +0000MEDIUM 6.8: The AirVelocity 1500 prints SNMP credentials on its physically accessible serial port during boot. This was fixed in AirVelocity 1500 software version 15.18.00.2511 and may affect other AirVelocity and AirSpeed models.https://patchthecve.com/cve/CVE-2022-36306.htmlhttps://patchthecve.com/cve/CVE-2022-36306.htmlWed, 17 Jun 2026 04:53:11 +0000MEDIUM 6.5: An authenticated attacker can enumerate and download sensitive files, including the eNodeB's web management UI's TLS private key, the web server binary, and the web server configuration file. These vulnerabilities were found in AirVelocity 1500 running software version 9.3.0.01249, were still presenhttps://patchthecve.com/cve/CVE-2022-36267.htmlhttps://patchthecve.com/cve/CVE-2022-36267.htmlWed, 17 Jun 2026 04:53:09 +0000CRITICAL 9.8: In Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists a Unauthenticated remote command injection vulnerability. The ping functionality can be called without user authentication when crafting a malicious http request by injecting code in one of the parameters allowing for remote code execuhttps://patchthecve.com/cve/CVE-2022-36266.htmlhttps://patchthecve.com/cve/CVE-2022-36266.htmlWed, 17 Jun 2026 04:53:08 +0000MEDIUM 6.1: In Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists a stored XSS vulnerability. As the binary file /home/www/cgi-bin/login.cgi does not check if the user is authenticated, a malicious actor can craft a specific request on the login.cgi endpoint that contains a base32 encoded XSS payloadhttps://patchthecve.com/cve/CVE-2022-36265.htmlhttps://patchthecve.com/cve/CVE-2022-36265.htmlWed, 17 Jun 2026 04:53:08 +0000HIGH 7.2: In Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists a Hidden system command web page. After performing a reverse engineering of the firmware, it was discovered that a hidden page not listed in the administration management interface allows a user to execute Linux commands on the device https://patchthecve.com/cve/CVE-2022-36264.htmlhttps://patchthecve.com/cve/CVE-2022-36264.htmlWed, 17 Jun 2026 04:53:08 +0000CRITICAL 9.1: In Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists an Unauthenticated remote Arbitrary File Upload vulnerability which allows overwriting arbitrary files. A malicious actor can remotely upload a file of their choice and overwrite any file in the system by manipulating the filename and https://patchthecve.com/cve/CVE-2022-21800.htmlhttps://patchthecve.com/cve/CVE-2022-21800.htmlWed, 17 Jun 2026 04:27:00 +0000MEDIUM 6.5: MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 uses the MD5 algorithm to hash the passwords before storing them but does not salt the hash. As a result, attackers may be able to crack the hashed passworhttps://patchthecve.com/cve/CVE-2022-21215.htmlhttps://patchthecve.com/cve/CVE-2022-21215.htmlWed, 17 Jun 2026 04:25:45 +0000CRITICAL 10.0: This vulnerability could allow an attacker to force the server to create and execute a web request granting access to backend APIs that are only accessible to the Mimosa MMP server, or request pages that could perform some actions themselves. The attacker could force the server into accessing routeshttps://patchthecve.com/cve/CVE-2022-21196.htmlhttps://patchthecve.com/cve/CVE-2022-21196.htmlWed, 17 Jun 2026 04:25:43 +0000CRITICAL 10.0: MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 does not perform proper authorization and authentication checks on multiple API routes. An attacker may gain access to these API routes and achieve remote https://patchthecve.com/cve/CVE-2022-21176.htmlhttps://patchthecve.com/cve/CVE-2022-21176.htmlWed, 17 Jun 2026 04:25:40 +0000HIGH 8.6: MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 does not properly sanitize user input, which may allow an attacker to perform a SQL injection and obtain sensitive information.https://patchthecve.com/cve/CVE-2022-21143.htmlhttps://patchthecve.com/cve/CVE-2022-21143.htmlWed, 17 Jun 2026 04:25:36 +0000HIGH 7.5: MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 does not properly sanitize user input on several locations, which may allow an attacker to inject arbitrary commands.https://patchthecve.com/cve/CVE-2022-21141.htmlhttps://patchthecve.com/cve/CVE-2022-21141.htmlWed, 17 Jun 2026 04:25:36 +0000CRITICAL 10.0: MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 does not perform proper authorization checks on multiple API functions. An attacker may gain access to these functions and achieve remote code execution, chttps://patchthecve.com/cve/CVE-2022-0138.htmlhttps://patchthecve.com/cve/CVE-2022-0138.htmlWed, 17 Jun 2026 04:20:02 +0000HIGH 7.5: MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 has a deserialization function that does not validate or check the data, allowing arbitrary classes to be created.