PT-2022-25009 · Nokia · Nokia 1350 Oms

Fabio Romano + 3 · Published 2022-09-13 · Updated 2022-09-16 · CVE-2022-39814

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions NOKIA 1350 OMS version R14.2

Description An Open Redirect issue occurs on the login page via the next HTTP GET parameter.

Recommendations For NOKIA 1350 OMS version R14.2, consider restricting access to the login page or validating the next parameter to prevent redirection to unauthorized sites until a fix is available.

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2022-39814

Affected Products

Nokia 1350 Oms

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2022-39814 · Security Note
• https://osv.dev/vulnerability/CVE-2022-39814 · Vendor Advisory
• https://gruppotim.it/it/footer/red-team.html · Note