CVE-2022-41763

2023-09-0500:00:00

mitre

www.cve.org

cve-2022-41763

nokia ams

remote code execution

debugger

ipaddress

authenticated user

ping function

privileges

AI Score

9.2

Confidence

High

EPSS

0.003

Percentile

66.7%

JSON

An issue was discovered in NOKIA AMS 9.7.05. Remote Code Execution exists via the debugger of the ipAddress variable. A remote user, authenticated to the AMS server, could inject code in the PING function. The privileges of the command executed depend on the user that runs the service.

References

www.gruppotim.it/it/footer/red-team.html