CVE-2022-40715

An issue was discovered in NOKIA 1350OMS R14.2. An Absolute Path Traversal vulnerability exists for a specific endpoint via the logfile parameter, allowing a remote authenticated attacker to read files on the filesystem arbitrarily.

Score

CVSS 3.1 6.5 Medium

Status

Modified - cve@mitre.org

Published

2022-09-19

Last modified

2024-08-03

Weaknesses

CWE-22

Affected products

• 1350 Optical Management System (Nokia)

References

• https://www.gruppotim.it/it/footer/red-team.html