PT-2026-22762 · Nokia · Nokia Impact

Published 2026-03-03 · Updated 2026-03-09 · CVE-2023-31044

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Nokia Impact versions prior to Mobile 23 FP1 Nokia Impact DM versions prior to 19.11

Description A flaw exists in Nokia Impact that allows a remote authenticated user to inject a malicious payload into the Campaign Name field when using the Add Campaign functionality. This injected data can be exported to a CSV file. An attacker can populate data fields within the CSV file to potentially exfiltrate data or perform other malicious actions when the file is automatically processed by spreadsheet software.

Recommendations Update Nokia Impact to version Mobile 23 FP1 or later. Update Nokia Impact DM to version 19.11 or later.

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2023-31044

Affected Products

Nokia Impact

References · 7

• https://osv.dev/vulnerability/CVE-2023-31044 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-31044 · Security Note
• https://t.me/cveNotify/154118 · Telegram Post
• https://nokia.com · Note
• https://t.me/CVEtracker/46228 · Telegram Post
• https://gruppotim.it/it/footer/red-team/2023/Motive-Impact-CVE-2023-31044.html · Note
• https://t.me/cveNotify/154785 · Telegram Post