PT-2022-10463 · Nokia · Nokia Broadcast Message Center

Francesco Pigini + 2 · Published 2022-05-25 · Updated 2022-06-07 · CVE-2021-35487

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Nokia Broadcast Message Center versions prior to 11.1.0

Description The issue allows an authenticated user to perform a Boolean Blind SQL Injection attack on the endpoint "/owui/block/send-receive-updates" (for the Manage Alerts page) via the extIdentifier HTTP POST parameter. This enables an attacker to obtain the database user, database name, and database version information, and potentially database data.

Recommendations For versions prior to 11.1.0, consider disabling access to the "/owui/block/send-receive-updates" endpoint until a patch is available. Restrict the use of the extIdentifier HTTP POST parameter in the affected endpoint to minimize the risk of exploitation.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2021-35487

Affected Products

Nokia Broadcast Message Center

References · 6

• 🔥 https://gruppotim.it/it/footer/red-team.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-35487 · Security Note
• https://osv.dev/vulnerability/CVE-2021-35487 · Vendor Advisory
• https://nokia.com/notices/responsible-disclosure · Vendor Advisory
• https://t.me/cvenotify/30706 · Telegram Post
• https://t.me/cibsecurity/43342 · Telegram Post