CVE-2022-40713

概要

参考情報

• gruppotim.it/it/footer/red-team.html · Third Party Advisory

1350 optical management system のその他の脆弱性

• CVE-2022-40715中 6.5An issue was discovered in NOKIA 1350OMS R14.2. An Absolute Path Traversal vulnerability exists for a specific endpoint via the logfile para…
• CVE-2022-40714中 6.1An issue was discovered in NOKIA 1350OMS R14.2. Reflected XSS exists under different /oms1350/* endpoints.
• CVE-2022-40712中 6.1An issue was discovered in NOKIA 1350OMS R14.2. Reflected XSS exists under different /cgi-bin/R14.2* endpoints.
• CVE-2022-39821高 7.5In NOKIA 1350 OMS R14.2, an Insertion of Sensitive Information into an Application Log File vulnerability occurs. The web application stores…
• CVE-2022-39819高 8.8In NOKIA 1350 OMS R14.2, multiple OS Command Injection vulnerabilities occurs. This allows authenticated users to execute commands on the op…