CVE-2008-1262

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 8.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2008-03-10 · updated 2026-06-16
Weakness: CWE-287

Description

The administration panel on the Airspan WiMax ProST 4.1 antenna with 6.5.38.0 software does not verify authentication credentials, which allows remote attackers to (1) upload malformed firmware or (2) bind the antenna to a different WiMAX base station via unspecified requests to forms under process_adv/.

Affected products

Airspan Wimax Prost: 4.1

References

http://airspan4wimax.googlepages.com/
http://secunia.com/advisories/29265
http://www.0x000000.com/?i=524
http://www.gnucitizen.org/projects/router-hacking-challenge/
http://www.kb.cert.org/vuls/id/248372
http://www.securityfocus.com/archive/1/489009/100/0/threaded
http://www.securityfocus.com/bid/28122
http://www.sharemethods.net/nepal/servlet/open?keeppath=false&aid=29820
http://www.vupen.com/english/advisories/2008/0802/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/41052
http://airspan4wimax.googlepages.com/
http://secunia.com/advisories/29265

Get alerted when CVE-2008-1262 or the next vulnerability affects your stack