CVE-2013-2270: Airvana Hubbub c1-600-Rt

Medium severity, CVSS 4.3. EPSS: 1.3% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the administration page in Airvana HubBub C1-600-RT and Sprint AIRAVE 2.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

• Airvana Hubbub c1-600-Rt: affected versions not specified
• Sprint Airave
• Sprint Airave Software: version 2.5 only

Published 2014-03-09. Last modified 2026-06-16.