PT-2022-25013 · Nokia · Nokia 1350 Oms

Fabio Romano + 3 · Published 2022-09-13 · Updated 2022-10-01 · CVE-2022-39819

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NOKIA 1350 OMS version R14.2

Description The issue allows authenticated users to execute commands on the operating system due to multiple OS Command Injection vulnerabilities. These vulnerabilities occur in the /cgi-bin/R14.2/log.pl endpoint via the cmd HTTP GET parameter and in the /cgi-bin/R14.2/checkping.pl endpoint via the addr HTTP GET parameter.

Recommendations For NOKIA 1350 OMS version R14.2, consider disabling access to the /cgi-bin/R14.2/log.pl and /cgi-bin/R14.2/checkping.pl endpoints until a patch is available. Additionally, restrict the use of the cmd and addr parameters in these endpoints to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2022-39819

Affected Products

Nokia 1350 Oms

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2022-39819 · Security Note
• https://osv.dev/vulnerability/CVE-2022-39819 · Vendor Advisory
• https://t.me/cibsecurity/49728 · Telegram Post
• https://gruppotim.it/it/footer/red-team.html · Note
• https://t.me/cvenotify/36117 · Telegram Post