CVE-2022-39820

In Network Element Manager in NOKIA NFM-T R19.9, an Unprotected Storage of Credentials vulnerability occurs under /root/RestUploadManager.xml.DRC and /DEPOT/KECustom199/OTNEDRC/RestUploadManager.xml. A remote user, authenticated to the operating system, with access privileges to the directory /ro...

PT-2023-14031 · Nokia · Nokia Nfm-T

Name of the Vulnerable Software and Affected Versions: NOKIA NFM-T version R19.9 Description: An issue was discovered in the Network Element Manager, where multiple Reflected XSS vulnerabilities exist. These vulnerabilities can be exploited via any parameter to log.pl, the bench or pid parameter ...

CVE-2022-41762

An issue was discovered in NOKIA NFM-T R19.9. Multiple Reflected XSS vulnerabilities exist in the Network Element Manager via any parameter to log.pl, the bench or pid parameter to top.pl, or the id parameter to easy1350.pl...

CVE-2022-41760: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in NOKIA NFM-T R19.9. Relative Path Traversal can occur under /oms1350/data/cpb/log of the Network Element Manager via the filename parameter, allowing a remote authenticated attacker to read arbitrary files...

CVE-2022-41762: Improper Neutralization of Input During Web Page Generation

An issue was discovered in NOKIA NFM-T R19.9. Multiple Reflected XSS vulnerabilities exist in the Network Element Manager via any parameter to log.pl, the bench or pid parameter to top.pl, or the id parameter to easy1350.pl...

Hitachi Energy XMC20 and FOX61x

1. EXECUTIVE SUMMARY CVSS v3 9.0 ATTENTION: Exploitable remotely/low attack complexity Vendor: Hitachi Energy Equipment: XMC20 and FOX61x Vulnerabilities: Weak Password Requirements, Missing Handler 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to...

Logic Flaw Vulnerability in NM3000 Network Element Management System

DDPV is a wholly owned subsidiary of DigitalVision Group, specializing in the research and development, production, marketing and service of coaxial broadband access technology and optical communication technology. A logic flaw vulnerability exists in the NM3000 network element management system,...

CVE-2013-5496

CVE-2013-5496 affects Cisco NX-OS Open Network Environment Platform (ONEP). A vulnerability due to insufficient pointer validation allows an authenticated, remote attacker to cause a network element to reload (DoS) by sending crafted packets. The issue, tracked as CSCui51551, is documented in Cis...

CVE-2013-5496: Improper Input Validation

Open Network Environment Platform ONEP in Cisco NX-OS allows remote authenticated users to cause a denial of service network-element reload via a crafted packet, aka Bug ID CSCui51551...

PT-2013-5580

Name of the Vulnerable Software and Affected Versions Cisco NX-OS affected versions not specified Description The issue allows remote authenticated users to cause a denial of service, resulting in a network-element reload, by sending a crafted packet to an affected network element. This is due to...

CVE-2003-0137

The CVE affects the SNMP daemon in the DX200-based Nokia SGSN network element. It allows remote attackers to read SNMP options by using arbitrary community strings, enabling partial information disclosure. No remediation details are provided in the supplied documents. Exploitation status or in-th...

Nokia SGSN (DX200 Based Network Element) SNMP issue

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Advisory Name: Nokia SGSN DX200 Based Network Element SNMP issue Release Date: 03/13/2003 Application: Nokia SGSN DX200 Based Network Element Platform: DX200 Severity: An attacker is able to read SNMP...