Lucene search

K
cve[email protected]CVE-2022-36222
HistoryDec 21, 2022 - 7:15 p.m.

CVE-2022-36222

2022-12-2119:15:14
CWE-798
web.nvd.nist.gov
29
nokia
fastmile
3tg00118abad52
optus
cve-2022-36222
admin account
web admin interface

8.4 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.1%

Nokia Fastmile 3tg00118abad52 devices shipped by Optus are shipped with a default hardcoded admin account of admin:Nq+L5st7o This account can be used locally to access the web admin interface.

Affected configurations

NVD
Node
nokiafastmile_firmwareMatch3tg00118abad52
AND
nokiafastmileMatch-

8.4 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.1%

Related for CVE-2022-36222