CVE-2022-39815

In NOKIA 1350 OMS R14.2, multiple OS Command Injection vulnerabilities occurs. This vulnerability allow unauthenticated users to execute commands on the operating system...

CVE-2022-39814

In NOKIA 1350 OMS R14.2, an Open Redirect vulnerability occurs is the login page via next HTTP GET parameter...

Design/Logic Flaw

In NOKIA 1350 OMS R14.2, an Insertion of Sensitive Information into an Application Log File vulnerability occurs. The web application stores critical information, such as cleartext user credentials, in world-readable files in the filesystem...

Open redirect

In NOKIA 1350 OMS R14.2, an Open Redirect vulnerability occurs is the login page via next HTTP GET parameter...

Sql injection

In NOKIA 1350 OMS R14.2, multiple SQL Injection vulnerabilities occurs. Exploitation requires an authenticated attacker. Through the injection of arbitrary SQL statements, a potential authenticated attacker can modify query syntax and perform unauthorized and unexpected operations against the...

Command injection

In NOKIA 1350 OMS R14.2, multiple OS Command Injection vulnerabilities occurs. This allows authenticated users to execute commands on the operating system...

Command injection

In NOKIA 1350 OMS R14.2, multiple OS Command Injection vulnerabilities occurs. This vulnerability allow unauthenticated users to execute commands on the operating system...

CVE-2022-39814

In NOKIA 1350 OMS R14.2, an Open Redirect vulnerability occurs is the login page via next HTTP GET parameter...

CVE-2022-39814

CVE-2022-39814 affects Nokia 1350 OMS (R14.2). The vulnerability is an open redirect on the login page via the next HTTP GET parameter. Root cause: insufficient validation of the next parameter leading to unauthorized redirection. Impact is described as an open redirect; detailed risk (e.g., cred...

CVE-2022-39815

Nokia 1350 OMS R14.2 contains multiple OS command injection vulnerabilities that allow unauthenticated command execution. Exploitation is described via specific API endpoints in PT-2022-25010, including /CGI-BIN/OTNE 1-14/runBatch.cgi (POST parameter: file), /CGI-BIN/OTNE 1-14/getRadioTLs.cgi (PO...

CVE-2022-39815

In NOKIA 1350 OMS R14.2, multiple OS Command Injection vulnerabilities occurs. This vulnerability allow unauthenticated users to execute commands on the operating system...

EUVD-2022-42260

In NOKIA 1350 OMS R14.2, multiple OS Command Injection vulnerabilities occurs. This vulnerability allow unauthenticated users to execute commands on the operating system...

CVE-2022-39816

NOKIA 1350 OMS R14.2 is affected by CVE-2022-39816: the edit configuration page exposes cleartext administrator credentials, exploitable by an authenticated attacker. The vulnerable component is the edit configuration flow, with the specific endpoint implicated as /cgi-bin/R14.2/cgi-bin/R14.2/hos...

CVE-2022-39817

Affected product: NOKIA 1350 OMS (R14.2). Vulnerability: Multiple SQL Injection flaws in the system, exploitable by an authenticated attacker who can inject arbitrary SQL to alter query syntax and perform unauthorized operations on the remote database. The issues are present in specific API endpo...

CVE-2022-39819

In NOKIA 1350 OMS R14.2, multiple OS Command Injection vulnerabilities occurs. This allows authenticated users to execute commands on the operating system...

CVE-2022-39819

CVE-2022-39819 affects NOKIA 1350 OMS R14.2, with OS command injection vulnerabilities that allow authenticated users to execute OS commands. The connected PT-2022-25013 entry provides concrete technical details: the issue occurs via the /cgi-bin/R14.2/log.pl endpoint (cmd parameter) and the /cgi...

CVE-2022-39821

In NOKIA 1350 OMS R14.2, an Insertion of Sensitive Information into an Application Log File vulnerability occurs. The web application stores critical information, such as cleartext user credentials, in world-readable files in the filesystem...

PT-2022-25015 · Nokia · Nokia 1350 Oms

Name of the Vulnerable Software and Affected Versions: NOKIA 1350 OMS version R14.2 Description: The web application stores critical information, such as cleartext user credentials, in world-readable files in the filesystem. This issue occurs under the /usr/Systems/OTNE 1 14...

NOKIA 1350 OMS 操作系统命令注入漏洞

NOKIA 1350 OMS is an optical management system from Nokia Finland. An operating system command injection vulnerability exists in NOKIA 1350 OMS version R14.2 that originates from allowing an unauthenticated user to execute commands on the operating system...

NOKIA 1350 OMS 安全漏洞

NOKIA 1350 OMS is an optical management system from the Finnish company Nokia NOKIA. A security vulnerability exists in NOKIA 1350 OMS version R14.2, which originates from the presence of a plaintext administrator password in the Edit Configuration page...