CVE-2022-39815

Nokia 1350 OMS R14.2 contains multiple OS command injection vulnerabilities that allow unauthenticated command execution. Exploitation is described via specific API endpoints in PT-2022-25010, including /CGI-BIN/OTNE 1-14/runBatch.cgi (POST parameter: file), /CGI-BIN/OTNE 1-14/getRadioTLs.cgi (PO...

CVE-2022-39816

NOKIA 1350 OMS R14.2 is affected by CVE-2022-39816: the edit configuration page exposes cleartext administrator credentials, exploitable by an authenticated attacker. The vulnerable component is the edit configuration flow, with the specific endpoint implicated as /cgi-bin/R14.2/cgi-bin/R14.2/hos...

CVE-2022-39821

CVE-2022-39821 affects Nokia 1350 OMS R14.2. The issue is an insertion of sensitive information into an application log file, resulting in cleartext credentials being stored in world-readable files in the filesystem. The Nokia 1350 OMS web interface/logs under /usr/Systems/OTNE 1 14 Master/mainte...

CVE-2022-39819

CVE-2022-39819 affects NOKIA 1350 OMS R14.2, with OS command injection vulnerabilities that allow authenticated users to execute OS commands. The connected PT-2022-25013 entry provides concrete technical details: the issue occurs via the /cgi-bin/R14.2/log.pl endpoint (cmd parameter) and the /cgi...

CVE-2022-39817

Affected product: NOKIA 1350 OMS (R14.2). Vulnerability: Multiple SQL Injection flaws in the system, exploitable by an authenticated attacker who can inject arbitrary SQL to alter query syntax and perform unauthorized operations on the remote database. The issues are present in specific API endpo...

CVE-2022-40715

Summary : CVE-2022-40715 affects Nokia 1350 OMS (R14.2). An Absolute Path Traversal vulnerability exists in a specific endpoint exploitable via the logfile parameter, allowing a remote authenticated attacker to read arbitrary files on the filesystem. The issue is centered on a vulnerable endpoint...

CVE-2022-40714

The CVE-2022-40714 issue affects Nokia 1350 OMS R14.2. It describes a reflected XSS in multiple /oms1350/* endpoints. According to the NVD entry, the vulnerability has CVSS v3.1 metrics: AV:N, AC:L, PR:N, UI:R, S:C, C:L, I:L, A:N, with a base score of 6.1 (Medium). Exploitation status or concrete...

CVE-2022-39814

CVE-2022-39814 affects Nokia 1350 OMS (R14.2). The vulnerability is an open redirect on the login page via the next HTTP GET parameter. Root cause: insufficient validation of the next parameter leading to unauthorized redirection. Impact is described as an open redirect; detailed risk (e.g., cred...

CVE-2022-40712

Consolidated CVE-2022-40712 details: NOKIA 1350OMS (R14.2) has a reflected XSS issue affecting multiple /cgi-bin/R14.2* endpoints. The CVSS v3.1 base score is 6.1 (Medium): Network attack vector, low impact on confidentiality/integrity, high user interaction required. Exploitation status is not f...

CVE-2022-40713

CVE-2022-40713 affects NOKIA 1350OMS R14.2. Multiple Relative Path Traversal flaws exist in different endpoints via the file parameter, allowing a remote authenticated attacker to read arbitrary files on the filesystem. The NVD/NVD-derived CVSSv3.1 metrics show a base score of 6.5 (Medium) with N...