Nokia
Nokia 1350 Optical Management System: vulnerabilidades y CVE
Nokia 1350 Optical Management System tiene 10 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 1 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE10
Últimos 12 meses0
Críticas1
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2022-40715 | Media (6.5) | 1.2% | — | 19 sept 2022 | An issue was discovered in NOKIA 1350OMS R14.2. An Absolute Path Traversal vulnerability exists for a specific endpoint via the logfile parameter, allowing a remote authenticated attacker to read files on the filesystem… |
| CVE-2022-40714 | Media (6.1) | 0.51% | — | 19 sept 2022 | An issue was discovered in NOKIA 1350OMS R14.2. Reflected XSS exists under different /oms1350/* endpoints. |
| CVE-2022-40713 | Media (6.5) | 1.2% | — | 19 sept 2022 | An issue was discovered in NOKIA 1350OMS R14.2. Multiple Relative Path Traversal issues exist in different specific endpoints via the file parameter, allowing a remote authenticated attacker to read files on the… |
| CVE-2022-40712 | Media (6.1) | 0.51% | — | 19 sept 2022 | An issue was discovered in NOKIA 1350OMS R14.2. Reflected XSS exists under different /cgi-bin/R14.2* endpoints. |
| CVE-2022-39821 | Alta (7.5) | 0.75% | — | 13 sept 2022 | In NOKIA 1350 OMS R14.2, an Insertion of Sensitive Information into an Application Log File vulnerability occurs. The web application stores critical information, such as cleartext user credentials, in world-readable… |
| CVE-2022-39819 | Alta (8.8) | 1.5% | — | 13 sept 2022 | In NOKIA 1350 OMS R14.2, multiple OS Command Injection vulnerabilities occurs. This allows authenticated users to execute commands on the operating system. |
| CVE-2022-39817 | Alta (8.8) | 0.87% | — | 13 sept 2022 | In NOKIA 1350 OMS R14.2, multiple SQL Injection vulnerabilities occurs. Exploitation requires an authenticated attacker. Through the injection of arbitrary SQL statements, a potential authenticated attacker can modify… |
| CVE-2022-39816 | Media (6.5) | 0.63% | — | 13 sept 2022 | In NOKIA 1350 OMS R14.2, Insufficiently Protected Credentials (cleartext administrator password) occur in the edit configuration page. Exploitation requires an authenticated attacker. |
| CVE-2022-39815 | Crítica (9.8) | 2.2% | — | 13 sept 2022 | In NOKIA 1350 OMS R14.2, multiple OS Command Injection vulnerabilities occurs. This vulnerability allow unauthenticated users to execute commands on the operating system. |
| CVE-2022-39814 | Media (6.1) | 0.45% | — | 13 sept 2022 | In NOKIA 1350 OMS R14.2, an Open Redirect vulnerability occurs is the login page via next HTTP GET parameter. |