Beveiligingsadvies

CVE-2022-41763

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-09-05 00:00:00
Laatst bijgewerkt 2024-08-03 12:49:43
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

An issue was discovered in NOKIA AMS 9.7.05. Remote Code Execution exists via the debugger of the ipAddress variable. A remote user, authenticated to the AMS server, could inject code in the PING function. The privileges of the command executed depend on the user that runs the service.