An issue was discovered in NOKIA 1350OMS R14.2. An Absolute Path Traversal vulnerability exists for a specific endpoint via the logfile parameter, allowing a remote authenticated attacker to read files on the filesystem arbitrarily.
References
Link | Resource |
---|---|
https://www.gruppotim.it/it/footer/red-team.html | Third Party Advisory |
Configurations
History
21 Sep 2022, 16:08
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-22 | |
CPE | cpe:2.3:a:nokia:1350_optical_management_system:14.2:*:*:*:*:*:*:* | |
First Time |
Nokia 1350 Optical Management System
Nokia |
|
References | (MISC) https://www.gruppotim.it/it/footer/red-team.html - Third Party Advisory | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
19 Sep 2022, 16:24
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2022-09-19 16:15
Updated : 2023-12-10 14:35
NVD link : CVE-2022-40715
Mitre link : CVE-2022-40715
CVE.ORG link : CVE-2022-40715
JSON object : View
Products Affected
nokia
- 1350_optical_management_system
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')