nokia Vulnerability Advisory Catalog

Total 144 security vulnerabilities recorded for nokia software and firmware.

← Back to All Vendors
Component: g-040w-q_firmware

Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of insufficient measures to prevent multiple failed authentication attempts. An unauthenticated re...

๐Ÿ“… 2023-11-03
CVSS 7.5 Dossier →
Component: wavelite_metro_200_and_fan_firmware

If Security Hardening guide rules are not followed, then Nokia WaveLite products allow a local user to create new users with administrative privileges...

๐Ÿ“… 2023-10-04
CVSS 8.1 Dossier →
Component: access_management_system

An issue was discovered in NOKIA AMS 9.7.05. Remote Code Execution exists via the debugger of the ipAddress variable. A remote user, authenticated to ...

๐Ÿ“… 2023-09-05
CVSS 8.8 Dossier →
Component: service_router_linux

Nokia Service Router Operating System (SR OS) 22.10 and SR Linux, when error-handling update-fault-tolerance is not enabled, mishandle BGP path attrib...

๐Ÿ“… 2023-08-29
CVSS 7.5 Dossier →
Component: netact

/SecurityManagement/html/createuser.jsf in Nokia NetAct 22 allows CSRF. A remote attacker is able to create users with arbitrary privileges, even admi...

๐Ÿ“… 2023-07-24
CVSS 8.8 Dossier →
Component: netact

An issue was discovered in Nokia NetAct 22 through the Administration of Measurements website section. A malicious user can edit or add the templateNa...

๐Ÿ“… 2023-07-24
CVSS 5.4 Dossier →
Component: netact

An issue was discovered in Nokia NetAct 22 through the Site Configuration Tool website section. A malicious user can change a filename of an uploaded ...

๐Ÿ“… 2023-07-24
CVSS 5.4 Dossier →
Component: netact

An issue was discovered in Nokia NetAct 22 through the Administration of Measurements website section. A malicious user can edit or add the templateNa...

๐Ÿ“… 2023-07-24
CVSS 8.8 Dossier →
Component: netact

An issue was discovered in Nokia NetAct 22. A remote user, authenticated to the website, can visit the Site Configuration Tool section and arbitrarily...

๐Ÿ“… 2023-07-24
CVSS 8.8 Dossier →
Component: asika_airscale_firmware

An issue was discovered on NOKIA Airscale ASIKA Single RAN devices before 21B. Nokia Single RAN commissioning procedures do not change (factory-time i...

๐Ÿ“… 2023-06-16
CVSS 6.3 Dossier →
Component: asika_airscale_firmware

An issue was discovered on NOKIA Airscale ASIKA Single RAN devices before 21B. If/when CSP (as a BTS administrator) removes security hardenings from t...

๐Ÿ“… 2023-06-16
CVSS 5.1 Dossier →
Component: asika_airscale_firmware

An issue was discovered on NOKIA Airscale ASIKA Single RAN devices before 21B. If/when CSP (as a BTS administrator) removes security hardenings from a...

๐Ÿ“… 2023-06-16
CVSS 5.1 Dossier →
Component: asika_airscale_firmware

An issue was discovered on NOKIA Airscale ASIKA Single RAN devices before 21B. A mobile network solution internal fault was found in Nokia Single RAN ...

๐Ÿ“… 2023-06-16
CVSS 3.8 Dossier →
Component: web_element_manager

A mobile network solution internal fault is found in Nokia Web Element Manager before 22 R1, in which an authenticated, unprivileged user can execute ...

๐Ÿ“… 2023-06-14
CVSS 7.0 Dossier →
Component: one-nds

In Nokia One-NDS (aka Network Directory Server) through 20.9, some Sudo permissions can be exploited by some users to escalate to root privileges and ...

๐Ÿ“… 2023-05-02
CVSS 8.8 Dossier →
Component: one-network_directory_server

Nokia OneNDS 17r2 has Insecure Permissions vulnerability that allows for privilege escalation....

๐Ÿ“… 2023-04-25
CVSS 7.8 Dossier →
Component: netact

An XXE issue was discovered in Nokia NetAct before 22 FP2211 via an XML document to a Performance Manager page. Input validation and a proper XML pars...

๐Ÿ“… 2023-04-25
CVSS 6.5 Dossier →
Component: netact

An XXE issue was discovered in Nokia NetAct before 22 FP2211 via an XML document to the Configuration Dashboard page. Input validation and a proper XM...

๐Ÿ“… 2023-04-25
CVSS 6.5 Dossier →
Component: netact

An issue was discovered in Nokia NetAct before 22 SP1037. On the Site Configuration Tool tab, attackers can upload a ZIP file which, when processed, e...

๐Ÿ“… 2023-04-24
CVSS 6.8 Dossier →
Component: netact

An issue was discovered in Nokia NetAct before 22 FP2211. On the Scheduled Search tab under the Alarm Reports Dashboard page, users can create a scrip...

๐Ÿ“… 2023-04-24
CVSS 6.8 Dossier →
Component: netact

An issue was discovered in Nokia NetAct before 22 FP2211. On the Working Set Manager page, users can create a Working Set with a name that has a clien...

๐Ÿ“… 2023-04-24
CVSS 6.8 Dossier →
Component: asik_airscale_474021a.101_firmware

The signature check in the Nokia ASIK AirScale system module version 474021A.101 can be bypassed allowing an attacker to run modified firmware. Thi...

๐Ÿ“… 2023-01-06
CVSS 8.4 Dossier →
Component: asik_airscale_474021a.102_firmware

The bootloader in the Nokia ASIK AirScale system module (versions 474021A.101 and 474021A.102) loads public keys for firmware verification signature....

๐Ÿ“… 2023-01-06
CVSS 8.4 Dossier →
Component: asik_airscale_474021a.102_firmware

A vulnerability exists in Nokiaโ€™s ASIK AirScale system module (versions 474021A.101 and 474021A.102) that could allow an attacker to place a script o...

๐Ÿ“… 2023-01-06
CVSS 8.4 Dossier →
Page 3 of 6 (144 Total Records)