1361 matches found
PT-2023-27921 · Nokia · Chunghwa Telecom Nokia G-040W-Q
Name of the Vulnerable Software and Affected Versions: Chunghwa Telecom NOKIA G-040W-Q affected versions not specified Description: The issue is related to weak password requirements. A remote attacker with regular user privilege can easily infer the administrator password from system information...
PT-2023-27919 · Nokia · Chunghwa Telecom Nokia G-040W-Q
Name of the Vulnerable Software and Affected Versions: Chunghwa Telecom NOKIA G-040W-Q affected versions not specified Description: The issue allows an unauthenticated remote attacker to bypass the authentication mechanism and log in to the device using an alternative URL. This enables attackers ...
PT-2023-27923 · Nokia · Chunghwa Telecom Nokia G-040W-Q Firewall
Name of the Vulnerable Software and Affected Versions: Chunghwa Telecom NOKIA G-040W-Q Firewall affected versions not specified Description: The issue is related to a vulnerability in the input validation for ICMP redirect messages in the Firewall function. An unauthenticated remote attacker can...
CVE-2023-22618
If Security Hardening guide rules are not followed, then Nokia WaveLite products allow a local user to create new users with administrative privileges by manipulating a web request. This affects for example WaveLite Metro 200 and Fan, WaveLite Metro 200 OPS and Fans, WaveLite Metro 200 and F2B...
Design/Logic Flaw
If Security Hardening guide rules are not followed, then Nokia WaveLite products allow a local user to create new users with administrative privileges by manipulating a web request. This affects for example WaveLite Metro 200 and Fan, WaveLite Metro 200 OPS and Fans, WaveLite Metro 200 and F2B...
CVE-2023-22618
If Security Hardening guide rules are not followed, then Nokia WaveLite products allow a local user to create new users with administrative privileges by manipulating a web request. This affects for example WaveLite Metro 200 and Fan, WaveLite Metro 200 OPS and Fans, WaveLite Metro 200 and F2B...
CVE-2023-22618
Nokia WaveLite vulnerability CVE-2023-22618 allows a local user to create new admin users by manipulating a web request when security hardening guidelines are not followed. Affected products/versions (prior to R2.1.1) include WaveLite Metro 200 and Fan, WaveLite Metro 200 OPS and Fans, WaveLite M...
CVE-2023-22618
If Security Hardening guide rules are not followed, then Nokia WaveLite products allow a local user to create new users with administrative privileges by manipulating a web request. This affects for example WaveLite Metro 200 and Fan, WaveLite Metro 200 OPS and Fans, WaveLite Metro 200 and F2B...
Nokia WaveLite Security Vulnerability
Nokia WaveLite is an optical networking solution from Nokia of Finland. A security vulnerability exists in Nokia WaveLite that originates from a security hardening guideline rule that, if not followed, could allow a local user to create a new user with administrative privileges by manipulating a...
PT-2023-18589 · Nokia · Wavelite
Name of the Vulnerable Software and Affected Versions: Nokia WaveLite products affected versions not specified Description: The issue allows a local user to create new users with administrative privileges by manipulating a web request if Security Hardening guide rules are not followed. This affec...
CVE-2022-41763
An issue was discovered in NOKIA AMS 9.7.05. Remote Code Execution exists via the debugger of the ipAddress variable. A remote user, authenticated to the AMS server, could inject code in the PING function. The privileges of the command executed depend on the user that runs the service...
CVE-2022-41763
An issue was discovered in NOKIA AMS 9.7.05. Remote Code Execution exists via the debugger of the ipAddress variable. A remote user, authenticated to the AMS server, could inject code in the PING function. The privileges of the command executed depend on the user that runs the service...
CVE-2022-41763
An issue was discovered in NOKIA AMS 9.7.05. Remote Code Execution exists via the debugger of the ipAddress variable. A remote user, authenticated to the AMS server, could inject code in the PING function. The privileges of the command executed depend on the user that runs the service...
Remote code execution
An issue was discovered in NOKIA AMS 9.7.05. Remote Code Execution exists via the debugger of the ipAddress variable. A remote user, authenticated to the AMS server, could inject code in the PING function. The privileges of the command executed depend on the user that runs the service...
CVE-2022-41763
An issue was discovered in NOKIA AMS 9.7.05. Remote Code Execution exists via the debugger of the ipAddress variable. A remote user, authenticated to the AMS server, could inject code in the PING function. The privileges of the command executed depend on the user that runs the service...
CVE-2022-41763
CVE-2022-41763 affects Nokia AMS 9.7.05. An authenticated remote user can exploit the debugger of the ipAddress variable to inject code in the PING function, enabling Remote Code Execution with privileges of the running AMS service user. The issue is documented across multiple sources (e.g., Red ...
Nokia Access Management System Code Injection Vulnerability
Nokia Access Management System is an access management system from Nokia, Finland. A security vulnerability exists in Nokia Access Management System version 9.7.05, which can be exploited to inject code into the PING function by a remote user who has been authenticated by the server...
PT-2023-14032 · Nokia · Nokia Ams
Name of the Vulnerable Software and Affected Versions: NOKIA AMS version 9.7.05 Description: An issue exists in the debugger of the ipAddress variable, allowing Remote Code Execution. A remote user, authenticated to the AMS server, could inject code in the PING function. The privileges of the...