CVE-2021-32571: Medium severity ericsson operations support system vulnerability
Published Oct 14, 2021
·Updated
UNSUPPORTED WHEN ASSIGNED In OSS-RC systems of the release 18B and older during data migration procedures certain files containing usernames and passwords are left in the system undeleted but in folders accessible by top privileged accounts only. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Ericsson Network Manager is a new generation OSS system which OSS-RC customers shall upgrade to.
Affected Software
4 affected components
All of the following
Ericsson Operations Support System-radio And Core Firmware<=18b
Ericsson Operations Support System-radio And Core
Ericsson Operations Support System-radio And Core Firmware<=18b
Ericsson Operations Support System-radio And Core
Event History
Oct 14, 2021
CVE Published
via MITRE·05:03 PM
Data Sourced
via MITRE·05:03 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID of this vulnerability?
The vulnerability ID of this vulnerability is CVE-2021-32571.
2
What is the severity level of CVE-2021-32571?
The severity level of CVE-2021-32571 is medium.
3
Which software versions are affected by CVE-2021-32571?
CVE-2021-32571 affects OSS-RC systems of the release 18B and older.
4
What is the CWE category of CVE-2021-32571?
CVE-2021-32571 belongs to the CWE category 459.
5
How can I fix CVE-2021-32571?
There is no official fix or patch for CVE-2021-32571 as it is unsupported.