Vulners
Lucene search
Nokia BMC Log Scanner - Remote Code Execution
🗓️ 16 Mar 2024 00:00:00Reported by Carlos Andres Gonzalez, Matthew GregoryType 
exploitdb🔗 www.exploit-db.com👁 353 Views
| Reporter | Title | Published | Views | Family All 10 |
|---|---|---|---|---|
 | Nokia BMC Log Scanner - Remote Code Execution Vulnerability | 18 Mar 202400:00 | – | zdt |
 | CVE-2022-45899 | 8 May 202600:00 | – | attackerkb |
 | Nokia Broadcast Message Center 操作系统命令注入漏洞 | 10 Aug 202200:00 | – | cnnvd |
 | CVE-2022-45899 | 8 May 202600:00 | – | cve |
 | CVE-2022-45899 | 8 May 202600:00 | – | cvelist |
 | EUVD-2022-48746 | 8 May 202606:32 | – | euvd |
 | CVE-2022-45899 | 8 May 202605:16 | – | nvd |
 | Nokia BMC Log Scanner 13 Command Injection | 18 Mar 202400:00 | – | packetstorm |
 | PT-2026-38659 | 8 May 202600:00 | – | ptsecurity |
 | CVE-2022-45899 | 8 May 202600:00 | – | vulnrichment |
10
# Exploit Title: Nokia BMC Log Scanner Remote Code Execution
# Google Dork: N/A
# Date: November 29, 2023
# Exploit Author: Carlos Andres Gonzalez, Matthew Gregory
# Vendor Homepage: https://www.nokia.com/
# Software Link: N/A
# Version: 13
# Tested on: Linux
# CVE : CVE-2022-45899
Description
The BMC Log Scanner web application, available on several hosts, is vulnerable to command injection
attacks, allowing for unauthenticated remote code execution. This vulnerability is especially significant
because this service runs as root.
Steps to Reproduce:
In the Search Pattern field, type:
;";command
Replacing the word "command" above with any Linux command.
Root access can be confirmed with the id command or any other command that would require
root access, such as displaying the contents of the /etc/shadow file."
This issue was fixed in version 13.1.Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
16 Mar 2024 00:00Current
7High risk
Vulners AI Score7
CVSS 3.16.5
EPSS0.00499
SSVC