CVE-2023-6728

Nokia SR OS bof.cfg file encryption is vulnerable to a brute force attack. This weakness allows an attacker in possession of the encrypted file to decrypt the bof.cfg file and obtain the BOF configuration content...

CVE-2023-6728

The Nokia SR OS is vulnerable to a brute force attack due to inadequate encryption strength in the bof.cfg file. An attacker in possession of the encrypted file can decrypt it to obtain the BOF configuration content , which may lead to sensitive data exposure. This vulnerability affects versions ...

CVE-2024-36497 Unhashed Storage of Password

The decrypted configuration file contains the password in cleartext which is used to configure WINSelect. It can be used to remove the existing restrictions and disable WINSelect entirely...