CVE-2022-39818

In NOKIA NFM-T R19.9, an OS Command Injection vulnerability occurs in /cgi-bin/R19.9/log.pl of the VM Manager WebUI via the cmd HTTP GET parameter. This allows authenticated users to execute commands, with root privileges, on the operating system...

CVE-2022-39818

CVE-2022-39818 affects Nokia NFM-T R19.9: OS Command Injection in the VM Manager WebUI at /cgi-bin/R19.9/log.pl reachable via the cmd HTTP GET parameter. The vulnerability allows authenticated users to execute commands with root privileges on the underlying OS. Affected component is the VM Manage...