nokia Vulnerability Advisory Catalog

Total 144 security vulnerabilities recorded for nokia software and firmware.

← Back to All Vendors
Component: g42_firmware

The misconfiguration in the sudoers configuration of the operating system in Infinera G42 version R6.1.3 allows low privileged OS users to read/writ...

📅 2025-07-02
CVSS 7.0 Dossier →
CVE-2024-25660 CRITICAL
Component: transcend_network_management_system

The WebDAV service in Infinera TNMS (Transcend Network Management System) 19.10.3 allows a low-privileged remote attacker to conduct unauthorized file...

📅 2024-10-01
CVSS 9.0 Dossier →
Component: transcend_network_management_system

In Infinera TNMS (Transcend Network Management System) 19.10.3, an insecure default configuration of the internal SFTP server on Linux servers allows ...

📅 2024-10-01
CVSS 7.2 Dossier →
Component: transcend_network_management_system

In Infinera TNMS (Transcend Network Management System) 19.10.3, cleartext storage of sensitive information in memory of the desktop application TNMS C...

📅 2024-10-01
CVSS 7.7 Dossier →
Component: transcend_network_management_system

Cleartext storage of passwords in Infinera TNMS (Transcend Network Management System) Server 19.10.3 allows attackers (with access to the database or ...

📅 2024-10-01
CVSS 6.5 Dossier →
Component: hit_7300_firmware

An issue was discovered in Infinera hiT 7300 5.60.50. Hidden functionality in the web interface allows a remote authenticated attacker to access reser...

📅 2024-09-30
CVSS 2.7 Dossier →
Component: hit_7300_firmware

An issue was discovered in Infinera hiT 7300 5.60.50. Cleartext storage of sensitive information in the memory of the @CT desktop management applicati...

📅 2024-09-30
CVSS 6.5 Dossier →
Component: hit_7300_firmware

An issue was discovered in Infinera hiT 7300 5.60.50. Undocumented privileged functions in the @CT management application allow an attacker to activat...

📅 2024-09-30
CVSS 8.4 Dossier →
Component: hit_7300_firmware

An issue was discovered in Infinera hiT 7300 5.60.50. A hidden SSH service (on the local management network interface) with hardcoded credentials allo...

📅 2024-09-30
CVSS 8.8 Dossier →
Component: hit_7300_firmware

An issue was discovered in Infinera hiT 7300 5.60.50. A web application allows a remote privileged attacker to execute applications contained in a spe...

📅 2024-09-30
CVSS 3.3 Dossier →
Component: hit_7300_firmware

An issue was discovered in Infinera hiT 7300 5.60.50. Sensitive information inside diagnostic files (exported by the @CT application) allows an attack...

📅 2024-09-30
CVSS 6.6 Dossier →
Component: hit_7300_firmware

An issue was discovered in Infinera hiT 7300 5.60.50. Cleartext storage of sensitive password in firmware update packages allows attackers to access v...

📅 2024-09-30
CVSS 8.8 Dossier →
Component: network_functions_manager_for_transport

An issue was discovered in NOKIA NFM-T R19.9. Reflected XSS in the Network Element Manager exists via /oms1350/pages/otn/cpbLogDisplay via the filenam...

📅 2023-12-25
CVSS 6.1 Dossier →
Component: network_functions_manager_for_transport

An issue was discovered in NOKIA NFM-T R19.9. Multiple Reflected XSS vulnerabilities exist in the Network Element Manager via any parameter to log.pl,...

📅 2023-12-25
CVSS 6.1 Dossier →
Component: network_functions_manager_for_transport

An issue was discovered in NOKIA NFM-T R19.9. An Absolute Path Traversal vulnerability exists under /cgi-bin/R19.9/viewlog.pl of the VM Manager WebUI ...

📅 2023-12-25
CVSS 6.5 Dossier →
Component: network_functions_manager_for_transport

An issue was discovered in NOKIA NFM-T R19.9. Relative Path Traversal can occur under /oms1350/data/cpb/log of the Network Element Manager via the fil...

📅 2023-12-25
CVSS 6.5 Dossier →
Component: network_functions_manager_for_transport

In NOKIA NFM-T R19.9, a SQL Injection vulnerability occurs in /cgi-bin/R19.9/easy1350.pl of the VM Manager WebUI via the id or host HTTP GET parameter...

📅 2023-12-25
CVSS 8.8 Dossier →
Component: network_functions_manager_for_transport

In Network Element Manager in NOKIA NFM-T R19.9, an Unprotected Storage of Credentials vulnerability occurs under /root/RestUploadManager.xml.DRC and ...

📅 2023-12-25
CVSS 6.5 Dossier →
Component: network_functions_manager_for_transport

In NOKIA NFM-T R19.9, an OS Command Injection vulnerability occurs in /cgi-bin/R19.9/log.pl of the VM Manager WebUI via the cmd HTTP GET parameter. Th...

📅 2023-12-25
CVSS 8.8 Dossier →
CVE-2023-41355 CRITICAL
Component: g-040w-q_firmware

Chunghwa Telecom NOKIA G-040W-Q Firewall function has a vulnerability of input validation for ICMP redirect messages. An unauthenticated remote attack...

📅 2023-11-03
CVSS 9.8 Dossier →
Component: g-040w-q_firmware

Chunghwa Telecom NOKIA G-040W-Q Firewall function does not block ICMP TIMESTAMP requests by default, an unauthenticated remote attacker can exploit th...

📅 2023-11-03
CVSS 4.0 Dossier →
Component: g-040w-q_firmware

Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of weak password requirements. A remote attacker with regular user privilege can easily infer the ...

📅 2023-11-03
CVSS 8.8 Dossier →
Component: g-040w-q_firmware

Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of insufficient filtering for user input. A remote attacker with administrator privilege can explo...

📅 2023-11-03
CVSS 7.2 Dossier →
CVE-2023-41351 CRITICAL
Component: g-040w-q_firmware

Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of authentication bypass, which allows an unauthenticated remote attacker to bypass the authentica...

📅 2023-11-03
CVSS 9.8 Dossier →
Page 2 of 6 (144 Total Records)