CVE-2022-39815

In NOKIA 1350 OMS R14.2, multiple OS Command Injection vulnerabilities occurs

published September 13, 2022

CVSS
—
EPSS
2%
Percentile
82.3
In the wild
Unconfirmed
What it is

🚨 Unauthenticated users can execute commands on the NOKIA 1350 OMS R14.2 system, like a mischievous kid sneaking into the control room! ⚠️ Think of it like a delivery person who doesn't need to show ID to enter a secure building, allowing them to mess with anything behind the locked door. This makes the potential for chaos just a few keystrokes away! An attacker could manipulate the system and execute arbitrary commands, leading to unauthorized access and potentially devastating outcomes. This could include altering system settings, accessing sensitive information, or even manipulating the device’s behavior. Yikes!

Put simply

Think of it like a delivery person who doesn't need to show ID to enter a secure building, allowing them to mess with anything behind the locked door. This makes the potential for chaos just a few keystrokes away! The vulnerability in NOKIA 1350 OMS R14.2 allows command injection due to insufficient input validation, meaning that an unauthenticated user can execute system commands directly.

What to do

An attacker could manipulate the system and execute arbitrary commands, leading to unauthorized access and potentially devastating outcomes. This could include altering system settings, accessing sensitive information, or even manipulating the device’s behavior. Yikes! To protect your systems, ensure that you apply the latest patches when they are available. Additionally, implement strict access controls to prevent unauthorized access. Regularly audit your systems to identify and mitigate potential vulnerabilities. You can tackle this one! Stay proactive, follow these steps, and keep your systems secure! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02186 · 82.3th percentile
Published
2022-09-13T20:36Z
EPSS history
Timeline
  • 13 SEP 20:36Z
    In NOKIA 1350 OMS R14.2, multiple OS Command Injection vulnerabilities occurs
    cvelistv5