PT-2026-22762 · Nokia · Nokia Impact

Publicado 2026-03-03 · Atualizado 2026-03-09 · CVE-2023-31044

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Nokia Impact versions prior to Mobile 23 FP1 Nokia Impact DM versions prior to 19.11

Description A flaw exists in Nokia Impact that allows a remote authenticated user to inject a malicious payload into the Campaign Name field when using the Add Campaign functionality. This injected data can be exported to a CSV file. An attacker can populate data fields within the CSV file to potentially exfiltrate data or perform other malicious actions when the file is automatically processed by spreadsheet software.

Recommendations Update Nokia Impact to version Mobile 23 FP1 or later. Update Nokia Impact DM to version 19.11 or later.

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2023-31044

Produtos afetados

Nokia Impact

Referências · 7

• https://osv.dev/vulnerability/CVE-2023-31044 · Aviso do Fabricante
• https://t.me/cveNotify/154118 · Publicação no Telegram
• https://nokia.com · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-31044 · Nota de Segurança
• https://t.me/CVEtracker/46228 · Publicação no Telegram
• https://gruppotim.it/it/footer/red-team/2023/Motive-Impact-CVE-2023-31044.html · Nota
• https://t.me/cveNotify/154785 · Publicação no Telegram