Threat database

Nokia 1830 Global Express (GX) contains a vulnerability that allows a low-privileged authenticated attacker to bypass the SSH isolation mechanism and access the underlying operating system shell via a custom SSH command. This CLI ACL bypass vulnerability is present by default and is not due to misconfiguration.

Nokia 1830 Global Express (GX) devices have a local privilege escalation vulnerability in the administrative shell interface. An authenticated user with restricted shell access can exploit this flaw to bypass local security controls and gain root-level access on the device.

Nokia NSP has an open redirect vulnerability due to insufficient server-side validation of the URL or redirect parameter. This flaw allows an attacker to craft a URL that redirects users to potentially malicious sites. The vulnerability has a medium severity with a CVSS score of 5.3. No official patch or remediation guidance is currently available. The affected versions include specific releases 23.11, 24.4, 24.8, 24.11, 25.4, 25.8, and 25.11. There are no known exploits in the wild at this time.

Nokia NSP contains a stored cross-site scripting (XSS) vulnerability due to insufficient validation or encoding of user input in a workflow application. An authenticated attacker with access to the workflow can embed malicious code that executes when another user views the affected content. The vulnerability has a medium severity with a CVSS score of 5.4. No official patch or remediation guidance is currently available from the vendor. There are no known exploits in the wild at this time.

Nokia WaveSuite contains an insufficient role-based access control vulnerability in its CPB Log Files feature. This flaw allows an authenticated user with low privileges to access pages intended for higher-privilege roles by directly requesting the URLs. The vulnerability has a high severity with a CVSS score of 7.6, indicating significant confidentiality impact and some integrity and availability impact. No official patch or remediation guidance is currently available from the vendor. The affected versions explicitly include 23.6, 24.6, 24.12, and 25.6.

Nokia MantaRay NM is vulnerable to a sudo privilege escalation vulnerability where a local attacker possessing administrative (local admin) privileges can escalate to full root privileges on the host. Successful exploitation results in root-level access to the filesystem and the ability to execute actions as root. The risk can be temporarily mitigated by restricting the set of commands permitted via sudo for the affected accounts.

Nokia MantaRay is subject to an Improper Access Control vulnerability due to insufficient authorization within the API. Successful exploitation could allow an authenticated attacker to retrieve confidential information beyond their assigned privileges.

Nokia MantaRay NM is subject to an unrestricted file upload vulnerability due to insufficient file type validation. Successful exploitation could allow an authenticated attacker to upload malicious files onto the system.

Nokia SR Linux is vulnerable to a local privilege escalation vulnerability. Successful exploitation of this vulnerability may allow an authenticated user to execute arbitrary commands with superuser privilege.

Nokia SR Linux is vulnerable to local privilege escalation vulnerability due to unsanitized format validation. Successful exploitation of this vulnerability may allow an authenticated user to execute arbitrary commands with superuser privileges.

CVE-2025-24819 is a Relative Path Traversal vulnerability in Nokia MantaRay NM's Software Manager application caused by improper validation of an input parameter related to the file system. This flaw allows an attacker with low privileges and network access to potentially read sensitive files outside the intended directory. The vulnerability has a medium severity with a CVSS score of 5.7 and does not impact integrity or availability. It affects versions earlier than 25R1-NM. No known exploits are reported in the wild, and no official patch or remediation guidance has been provided by Nokia at this time.

Nokia MantaRay NM contains an OS command injection vulnerability in its Log Search application due to improper neutralization of special elements in OS commands. This vulnerability affects versions earlier than 25R1-NM. It has a high severity with a CVSS score of 8. No official patch or remediation guidance is currently available from the vendor. There are no known exploits in the wild at this time.

Nokia MantaRay NM contains an OS command injection vulnerability in the Symptom Collector application due to improper neutralization of special elements in OS commands. This vulnerability affects versions earlier than 25R1-NM. It has a high severity rating with a CVSS score of 8. No official patch or remediation guidance has been provided yet. There are no known exploits in the wild at this time.

Infinera DNA is vulnerable to a time-based SQL injection vulnerability due to insufficient input validation, which may result in leaking of sensitive information.

The unified WEBUI application of the ONT/Beacon device contains an input handling flaw that allows authenticated users to trigger unintended system-level command execution. Due to insufficient validation of user-supplied data, a low-privileged authenticated attacker may be able to execute arbitrary commands on the underlying ONT/Beacon operating system, potentially impacting the confidentiality, integrity, and availability of the device.

CVE-2025-0980 is an authentication vulnerability in Nokia SR Linux affecting versions prior to 23.10.6 and 24.10.2. It allows unauthorized access to the JSON-RPC service due to improper validation, enabling attackers to bypass authentication. The vulnerability has a CVSS score of 6.4, indicating medium severity, with high impact on confidentiality, integrity, and availability but requiring local access with high privileges. No known exploits are currently reported in the wild. European organizations using Nokia SR Linux for network infrastructure could face risks of unauthorized control or data exposure.

The web application allows user input to pass unfiltered to a command executed on the underlying operating system. An attacker with high privileged access (administrator) to the application has the potential execute commands on the operating system under the context of the webserver. The vulnerable component is bound to the network stack and the set of possible attackers extends up to and including the entire Internet. Has the potential to inject command while creating a new User from User Management.

File contents could be read from the local file system by an attacker. Additionally, malicious code could be inserted in the file, leading to a full compromise of the web application and the container it is running on. The vulnerable component is bound to the network stack and the set of possible attackers extends up to and including the entire Internet. The web application allows arbitrary files to be included in a file that was downloadable and executable by the web server.

The web application allows user input to pass unfiltered to a command executed on the underlying operating system. The vulnerable component is bound to the network stack and the set of possible attackers extends up to and including the entire Internet. An attacker with low privileged access to the application has the potential to execute commands on the operating system under the context of the webserver.

Nokia Single RAN baseband software versions earlier than 24R1-SR 2.1 MP contain a SOAP message input validation flaw, which in theory could potentially be used for causing resource exhaustion in the Single RAN baseband OAM service. No practical exploit has been detected for this flaw. However, the issue has been corrected starting from release 24R1-SR 2.1 MP by adding sufficient input validation for received SOAP requests, effectively mitigating the reported issue.