Airspan Airspot 5410 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Airspan Airspot 5410 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2022-36267 — CVSS 9.8 (critical): In Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists a Unauthenticated remote command injection vulnerability. The ping…
• CVE-2022-36264 — CVSS 9.1 (critical): In Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists an Unauthenticated remote Arbitrary File Upload vulnerability which allows…
• CVE-2022-36265 — CVSS 7.2 (high): In Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists a Hidden system command web page. After performing a reverse engineering…
• CVE-2022-36266 — CVSS 6.1 (medium): In Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists a stored XSS vulnerability. As the binary file /home/www/cgi-bin/login.cgi…