PT-2025-30233 · Nokia · Wavesuite Noc

André Oudhof + 1 · Published 2025-07-21 · Updated 2025-08-31 · CVE-2025-24937

Positive Technologies (AI Summary)

CVSS v3.1

9.0

Critical

Base vector

AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions File contents (affected versions not specified)

Description An attacker could read file contents from the local file system. Malicious code could be inserted into the file, potentially leading to a full compromise of the web application and its container. The vulnerable component is bound to the network stack, exposing it to attacks from the Internet. The web application allows arbitrary files to be included in a downloadable and executable file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-98

Related Identifiers

CVE-2025-24937

Affected Products

Wavesuite Noc

References · 7

• https://osv.dev/vulnerability/CVE-2025-24937 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-24937 · Security Note
• https://nokia.com/about-us/security-and-privacy/product-security-advisory/cve-2025-24937 · Vendor Advisory
• https://twitter.com/CVEnew/status/1947188858761671150 · Twitter Post
• https://t.me/cvenotify/129650 · Telegram Post
• https://t.me/cvetracker/28307 · Telegram Post
• https://twitter.com/grok/status/1961961024967622912 · Twitter Post