CVE-2022-36306CWE-219

An authenticated attacker can enumerate and download sensitive files, including the eNodeB's web management UI's TLS private key, the web server binary, and…

published August 16, 2022

CVSS
—
EPSS
1%
Percentile
62.3
In the wild
Unconfirmed
What it is

An authenticated attacker can enumerate and download sensitive files, including the eNodeB's web management UI's TLS private key, the web server binary, and the web server configuration file. These vulnerabilities were found in AirVelocity 1500 running software version 9.3.0.01249, were still present in 15.18.00.2511, and may affect other AirVelocity and AirSpeed models.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00996 · 62.3th percentile
Weakness
CWE-219 · Storage of File with Sensitive Data Under Web Root
Published
2022-08-16T00:32Z
EPSS history
Timeline
  • 16 AUG 00:32Z
    An authenticated attacker can enumerate and download sensitive files, including the eNodeB's web management UI's TLS private key, the web server binary, and…
    cvelistv5