Threat database

CVE-2025-0980 is an authentication vulnerability in Nokia SR Linux affecting versions prior to 23.10.6 and 24.10.2. It allows unauthorized access to the JSON-RPC service due to improper validation, enabling attackers to bypass authentication. The vulnerability has a CVSS score of 6.4, indicating medium severity, with high impact on confidentiality, integrity, and availability but requiring local access with high privileges. No known exploits are currently reported in the wild. European organizations using Nokia SR Linux for network infrastructure could face risks of unauthorized control or data exposure.