CVE-2021-26597

2021-03-2518:56:45

mitre

www.cve.org

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.5%

JSON

An issue was discovered in Nokia NetAct 18A. A remote user, authenticated to the NOKIA NetAct Web Page, can visit the Site Configuration Tool web site section and arbitrarily upload potentially dangerous files without restrictions via the /netact/sct dir parameter in conjunction with the operation=upload value.