PT-2022-25489 · Nokia · Nokia 1350 Oms

Fabio Romano + 3 · Published 2022-09-19 · Updated 2025-06-03 · CVE-2022-40713

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions NOKIA 1350OMS version R14.2

Description An issue exists in the software, where multiple Relative Path Traversal issues are present in different specific endpoints via the file parameter. This allows a remote authenticated attacker to read files on the filesystem arbitrarily.

Recommendations For NOKIA 1350OMS version R14.2, consider restricting access to the vulnerable endpoints and limiting the use of the file parameter until a fix is available. As a temporary workaround, restrict file system access to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2022-40713

Affected Products

Nokia 1350 Oms

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2022-40713 · Security Note
• https://osv.dev/vulnerability/CVE-2022-40713 · Vendor Advisory
• https://t.me/cvenotify/124527 · Telegram Post
• https://gruppotim.it/it/footer/red-team.html · Note