CVE-2021-31932

CRITICO 9.8CVE-2021-31932 · Published 11/02/2022 · updated 17/06/2026

In breve

CVE-2021-31932 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda bts trs web console (nokia).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 21.6%, superiore al 97.6% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
bts trs web console nokia	`= ftm_w20_fp2_2019.08.16_0010`	No fix yet

Description

Nokia BTS TRS web console FTM_W20_FP2_2019.08.16_0010 allows Authentication Bypass. A malicious unauthenticated user can get access to all the functionalities exposed via the web panel, circumventing the authentication process, by using URL encoding for the . (dot) character.

References

packetstormsecurity.com/files/165964/Nokia-Transport-Module-Authentication-Bypass.html · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free