Nokia

Records169All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical17CVSS 9.0–10.0

CVSS high72CVSS 7.0–8.9

Exploited now

Nokia records in CISA KEV

No Nokia vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Netact 12 records HIGH 1350 Optical Management System 10 records MEDIUM Hit 7300 Firmware 7 records MEDIUM Impact 7 records MEDIUM Network Functions Manager For Transport 7 records MEDIUM G-040w-q Firmware 6 records MEDIUM I-240w-q Gpon Ont Firmware 6 records MEDIUM Mantaray Nm 6 records LOW

Records

10 records in 1350 Optical Management System · all components

TI-2022-19347 CVE-2022-40713 · GHSA-9v9p-vg3w-f44m

An issue was discovered in NOKIA 1350OMS R14.2.

MEDIUM 62

An issue was discovered in NOKIA 1350OMS R14.2.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01275 Published 2022-09-19 No fix listed CWE-22

TI-2022-19346 CVE-2022-40712 · GHSA-cxpc-6wmp-c2mm

An issue was discovered in NOKIA 1350OMS R14.2.

MEDIUM 60

An issue was discovered in NOKIA 1350OMS R14.2.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00526 Published 2022-09-19 No fix listed CWE-79

TI-2022-18813 CVE-2022-39815 · GHSA-37p6-x4xg-m25g

In NOKIA 1350 OMS R14.2, multiple OS Command Injection vulnerabilities occurs.

MEDIUM 46

In NOKIA 1350 OMS R14.2, multiple OS Command Injection vulnerabilities occurs.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02154 Published 2022-09-13 No fix listed CWE-78

TI-2022-18817 CVE-2022-39819 · GHSA-45vc-8wxf-vrvf

In NOKIA 1350 OMS R14.2, multiple OS Command Injection vulnerabilities occurs.

MEDIUM 41

In NOKIA 1350 OMS R14.2, multiple OS Command Injection vulnerabilities occurs.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01496 Published 2022-09-13 No fix listed CWE-78

TI-2022-18815 CVE-2022-39817 · GHSA-xc67-xj3h-6w7f

In NOKIA 1350 OMS R14.2, multiple SQL Injection vulnerabilities occurs.

MEDIUM 40

In NOKIA 1350 OMS R14.2, multiple SQL Injection vulnerabilities occurs.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00886 Published 2022-09-13 No fix listed CWE-89

TI-2022-18819 CVE-2022-39821 · GHSA-qrf6-gx4g-hqv9

In NOKIA 1350 OMS R14.2, an Insertion of Sensitive Information into an Application Log…

LOW 34

In NOKIA 1350 OMS R14.2, an Insertion of Sensitive Information into an Application Log File vulnerability occurs.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00762 Published 2022-09-13 No fix listed CWE-532

TI-2022-19349 CVE-2022-40715 · GHSA-4536-pp2v-fh9m

An issue was discovered in NOKIA 1350OMS R14.2.

LOW 31

An issue was discovered in NOKIA 1350OMS R14.2.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01275 Published 2022-09-19 No fix listed CWE-22

TI-2022-18814 CVE-2022-39816 · GHSA-pc4q-fxcg-7ghm

In NOKIA 1350 OMS R14.2, Insufficiently Protected Credentials (cleartext administrator…

LOW 30

In NOKIA 1350 OMS R14.2, Insufficiently Protected Credentials (cleartext administrator password) occur in the edit configuration page.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00645 Published 2022-09-13 No fix listed CWE-522

TI-2022-19348 CVE-2022-40714 · GHSA-9r47-jh8c-w2hq

An issue was discovered in NOKIA 1350OMS R14.2.

LOW 28

An issue was discovered in NOKIA 1350OMS R14.2.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00526 Published 2022-09-19 No fix listed CWE-79

TI-2022-18812 CVE-2022-39814 · GHSA-2w82-25p5-4h8g

In NOKIA 1350 OMS R14.2, an Open Redirect vulnerability occurs is the login page via next HTTP GET parameter.

LOW 28

In NOKIA 1350 OMS R14.2, an Open Redirect vulnerability occurs is the login page via next HTTP GET parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00456 Published 2022-09-13 No fix listed CWE-601

Open these records in search →