CVE-2023-6728

Nokia SR OS bof.cfg file encryption is vulnerable to a brute force attack. This weakness allows an attacker in possession of the encrypted file to decrypt the bof.cfg file and obtain the BOF configuration content.

Score

CVSS 3.1 3.3 Low

Status

Deferred - b48c3b8f-639e-4c16-8725-497bc411dad0

Published

2024-10-17

Last modified

2024-11-05

Weaknesses

CWE-326

Affected products

• 7210 Sas Os (Nokia)
• 7450 Ess (Nokia)
• 7705 Sar Os (Nokia)
• 7750 Sr (Nokia)
• 7950 Ixr (Nokia)
• Sr Os 7250 Ixr (Nokia)
• Vsr (Nokia)

References

• https://www.nokia.com/about-us/security-and-privacy/product-security-advisory/cve-2023-6728/