CVE-2022-36308 : Security Advisory and Response

Airspan AirVelocity 1500 web management UI vulnerability allows exposure of SNMP credentials in plaintext and unhashed storage of SNMPv3 credentials on systems running versions older than 15.18.00.2511. This security flaw enables unauthorized users to manipulate the eNodeB over SNMP.

Understanding CVE-2022-36308

This CVE details a significant security issue in Airspan AirVelocity 1500 web management UI that exposes sensitive SNMP credentials.

What is CVE-2022-36308?

The CVE-2022-36308 vulnerability in Airspan AirVelocity 1500 web management UI leads to the disclosure of SNMP credentials in plaintext and the unhashed storage of SNMPv3 credentials on the filesystem. Attackers with web access can exploit this flaw to manipulate the eNodeB over SNMP.

The Impact of CVE-2022-36308

The impact of this vulnerability is severe as it allows unauthorized users to access and abuse SNMP credentials, potentially compromising the integrity and security of the affected systems.

Technical Details of CVE-2022-36308

This section provides deeper insights into the vulnerability, including the description, affected systems and versions, and the exploitation mechanism.

Vulnerability Description

The vulnerability exposes SNMP credentials in plaintext on older software versions and stores SNMPv3 credentials unhashed on the filesystem, enabling unauthorized access to manipulate the eNodeB over SNMP.

Affected Systems and Versions

Systems running Airspan AirVelocity software versions below 15.18.00.2511 are vulnerable to this security issue.

Exploitation Mechanism

Unauthorized users with web access can utilize the exposed credentials to manipulate the eNodeB over SNMP, potentially leading to unauthorized control and access.

Mitigation and Prevention

To address CVE-2022-36308, immediate steps, long-term security practices, and the importance of patching and updates are crucial.

Immediate Steps to Take

Affected users should update to software versions equal to or above 15.18.00.2511, change SNMP credentials, and restrict web access to mitigate the risk of exploitation.

Long-Term Security Practices

Implementing strong access controls, regular security audits, and monitoring SNMP activities can enhance the overall security posture and prevent unauthorized access.

Patching and Updates

Regularly applying software patches, firmware updates, and security fixes provided by Airspan is essential to remediate the vulnerability and enhance the security of AirVelocity systems.