CVE-2022-39818

In NOKIA NFM-T R19.9, an OS Command Injection vulnerability occurs in /cgi-bin/R19.9/log.pl of the VM Manager WebUI via the cmd HTTP GET parameter

published December 25, 2023

CVSS
—
EPSS
2%
Percentile
82.7
In the wild
Unconfirmed
What it is

In NOKIA NFM-T R19.9, an OS Command Injection vulnerability occurs in /cgi-bin/R19.9/log.pl of the VM Manager WebUI via the cmd HTTP GET parameter. This allows authenticated users to execute commands, with root privileges, on the operating system.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02237 · 82.7th percentile
Published
2023-12-25T00:00Z
EPSS history
Timeline
  • 25 DEC 00:00Z
    In NOKIA NFM-T R19.9, an OS Command Injection vulnerability occurs in /cgi-bin/R19.9/log.pl of the VM Manager WebUI via the cmd HTTP GET parameter
    cvelistv5