« Volver al listado

CVE-2025-24937

Estado: AnalizadaCrítica (9)—

File contents could be read from the local file system by an attacker. Additionally, malicious code could be inserted in the file, leading to a full compromise of the web application and the container it is running on.

The vulnerable component is bound to the network stack and the set of possible attackers extends up to and including the entire Internet. The web application allows arbitrary files to be included in a file that was downloadable and executable by the web server.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

🎯 Técnicas ATT&CK

Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.

AV:A, PR:L sugieren red adyacente con privilegios locales (T1210). LFI permite lectura de archivos (T1005), inyección de código en archivos descargables (T1059), y manipulación del contenido (T1565.001).

Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.

🛡️ Mitigaciones ATT&CK que cubren estas técnicas

Privileged Account ManagementDisable or Remove Feature or ProgramVulnerability ScanningThreat Intelligence ProgramRestrict Web-Based ContentRestrict File and Directory Permissions

Tecnologías afectadas (1)

Nokia — Wavesuite NOC

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-24937",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-24937",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-07-23T18:43:08.726575Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 9,
          "attackVector": "ADJACENT_NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 6,
        "exploitabilityScore": 2.3
      }
    ]
  },
  "affected": [
    {
      "source": "b48c3b8f-639e-4c16-8725-497bc411dad0",
      "affectedData": [
        {
          "vendor": "Nokia",
          "product": "WaveSuite NOC",
          "versions": [
            {
              "status": "affected",
              "version": "WS-NOC 24.6, WS-NOC 23.6 and WS-NOC 23.12"
            },
            {
              "status": "unaffected",
              "version": "WS-NOC 24.6 FP3"
            }
          ]
        }
      ]
    }
  ],
  "published": "2025-07-21T07:15:24.007",
  "references": [
    {
      "url": "https://www.nokia.com/about-us/security-and-privacy/product-security-advisory/cve-2025-24937/",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "b48c3b8f-639e-4c16-8725-497bc411dad0"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "description": [
        {
          "lang": "en",
          "value": "CWE-98"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "File contents could be read from the local file system by an attacker. Additionally, malicious code could be inserted in the file, leading to a full compromise of the web application and the container it is running on.\n\nThe vulnerable component is bound to the network stack and the set of possible attackers extends up to and including the entire Internet. The web application allows arbitrary files to be included in a file that was downloadable and executable by the web server."
    },
    {
      "lang": "es",
      "value": "Un atacante podría leer el contenido del archivo desde el sistema de archivos local. Además, podría insertar código malicioso en el archivo, lo que comprometería por completo la aplicación web y el contenedor en el que se ejecuta. El componente vulnerable está vinculado a la pila de red y el conjunto de posibles atacantes se extiende a toda Internet. La aplicación web permite la inclusión de archivos arbitrarios en un archivo descargable y ejecutable por el servidor web."
    }
  ],
  "lastModified": "2026-06-17T08:59:51.847",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:nokia:wavesuite_noc:23.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "557A2709-02CD-41F2-8D39-591C55DBC6CB"
            },
            {
              "criteria": "cpe:2.3:a:nokia:wavesuite_noc:23.12:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3A4BF10D-5F41-49B7-AF3F-BAC85C6D8A15"
            },
            {
              "criteria": "cpe:2.3:a:nokia:wavesuite_noc:24.6:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9CA0E502-BCDA-4616-A4D2-0DBBC22163DA"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "b48c3b8f-639e-4c16-8725-497bc411dad0"
}