PT-2024-15062

Name of the Vulnerable Software and Affected Versions Nokia SR OS routers affected versions not specified Description The issue allows low-privilege authenticated users with "access console" to gain read-write access to the entire file system via SFTP or SCP. This access enables them to read or...

Nokia Service Router Operating System 安全漏洞

Nokia Service Router Operating System Nokia SR OS is an operating system used by Nokia of Finland for its service router series. A security vulnerability exists in Nokia Service Router Operating System SR OS prior to version 24, which arises from a brute-force attack vulnerability in the bof.cfg...

Nokia Service Router Operating System 安全漏洞

Nokia Service Router Operating System Nokia SR OS is an operating system used by Nokia of Finland for its service router series. A security vulnerability exists in Nokia Service Router Operating System SR OS prior to version 24, where the router allows read and write access to a user configured...

PT-2024-15061 · Nokia · Nokia Sr Os

Name of the Vulnerable Software and Affected Versions: Nokia SR OS affected versions not specified Description: The Nokia SR OS bof.cfg file encryption is vulnerable to a brute force attack, allowing an attacker in possession of the encrypted file to decrypt it and obtain the BOF configuration...

CVE-2023-25189

BTS is affected by information disclosure vulnerability where mobile network operator personnel connected over BTS Web Element Manager, regardless of the access privileges, having a possibility to read BTS service operation details performed by Nokia Care service personnel via SSH...

Nokia Airscale ASIKA Single RAN 安全漏洞

Nokia Airscale ASIKA Single RAN is an application for end-to-end use by Nokia of Finland. A security vulnerability exists in Nokia Airscale ASIKA Single RAN, which originates from a mobile network operator's personnel connected to the BTS Web Element Manager, regardless of their access rights, ma...

CVE-2023-25189

BTS is affected by information disclosure vulnerability where mobile network operator personnel connected over BTS Web Element Manager, regardless of the access privileges, having a possibility to read BTS service operation details performed by Nokia Care service personnel via SSH...

CVE-2023-25189

BTS is affected by information disclosure vulnerability where mobile network operator personnel connected over BTS Web Element Manager, regardless of the access privileges, having a possibility to read BTS service operation details performed by Nokia Care service personnel via SSH...

CVE-2023-25189

Summary: CVE-2023-25189 is an information-disclosure vulnerability affecting Nokia BTS Web Element Manager, enabling mobile network operator personnel to read BTS service operation details performed by Nokia Care personnel via SSH, regardless of their access privileges. Affected component: BTS We...

Malicious code in @nokia-smp/smp-client-library-18.9 (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2023-38293

Certain software builds for the Nokia C200 and Nokia C100 Android devices contain a vulnerable, pre-installed app with a package name of com.tracfone.tfstatus versionCode='31', versionName='12' that allows local third-party apps to execute arbitrary AT commands in its context radio user via AT...

Nokia C100 安全漏洞

Nokia C100 is a smartphone from Nokia, Finland. A security vulnerability exists in the Nokia C100 and Nokia C200, which arises from the fact that certain software versions of the device contain a vulnerable pre-installed application com.tracfone.tfstatus that allows a local third-party applicatio...

PT-2024-12698 · Nokia · Nokia C200 +1

Name of the Vulnerable Software and Affected Versions: Nokia C200 versions with software build fingerprints Nokia/Drake 02US/DRK:12/SP1A.210812.016/02US 1 080:user/release-keys and Nokia/Drake 02US/DRK:12/SP1A.210812.016/02US 1 040:user/release-keys Nokia C100 versions with software build...

PT-2024-12704 · Nokia +2 · Nokia C200 +3

Name of the Vulnerable Software and Affected Versions: AT&T Calypso version ATT/U318AA/U318AA:10/QP1A.190711.020/1632369780:user/release-keys Nokia C100 versions Nokia/DrakeLite 02US/DKT:12/SP1A.210812.016/02US 1 190:user/release-keys through Nokia/DrakeLite 02US/DKT:12/SP1A.210812.016/02US 1...

CVE-2023-38299

Various software builds for the AT&T Calypso, Nokia C100, Nokia C200, and BLU View 3 devices leak the device IMEI to a system property that can be accessed by any local app on the device without any permissions or special privileges. Google restricted third-party apps from directly obtaining...

CVE-2023-38293

CVE-2023-38293 concerns Nokia C200/C100 devices with a pre-installed com.tracfone.tfstatus app. It allows local third-party apps to inject and execute arbitrary AT commands in the radio context by exploiting two input/injection techniques via a broadcast to com.tracfone.tfstatus/.TFStatus, with n...

CVE-2023-38299

CVE-2023-38299 affects AT&T Calypso, Nokia C100, Nokia C200 and BLU View 3 devices. The issue is that certain software builds leak the device IMEI to a system property (persist.sys.imei1) accessible by any local app without permissions. A high-privilege process exposes the value, allowing indirec...

多款产品 安全漏洞

Nokia C100 is a smartphone from Nokia Finland. A security vulnerability exists in multiple products and stems from the fact that certain software versions of the device contain vulnerable pre-installed applications that can leak the device IMEI to system properties, which can be accessed by any...

CVE-2023-38293

Certain software builds for the Nokia C200 and Nokia C100 Android devices contain a vulnerable, pre-installed app with a package name of com.tracfone.tfstatus versionCode='31', versionName='12' that allows local third-party apps to execute arbitrary AT commands in its context radio user via AT...

CVE-2023-38293

Certain software builds for the Nokia C200 and Nokia C100 Android devices contain a vulnerable, pre-installed app with a package name of com.tracfone.tfstatus versionCode='31', versionName='12' that allows local third-party apps to execute arbitrary AT commands in its context radio user via AT...