CVE-2022-39818: OS Command Injection
In NOKIA NFM-T R19.9, an OS Command Injection vulnerability occurs in /cgi-bin/R19.9/log.pl of the VM Manager WebUI via the cmd HTTP GET parameter. This allows authenticated users to execute commands, with root privileges, on the operating system.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-39818?
CVE-2022-39818 has a high severity rating due to its potential to allow authenticated users to execute commands with root privileges.
How do I fix CVE-2022-39818?
To fix CVE-2022-39818, it is essential to patch the affected software to the latest version provided by Nokia.
Who is affected by CVE-2022-39818?
CVE-2022-39818 affects users of NOKIA Network Functions Manager for Transport version 19.9.
What is the impact of CVE-2022-39818?
The impact of CVE-2022-39818 allows an attacker with valid credentials to execute unauthorized commands on the operating system.
Is authentication required to exploit CVE-2022-39818?
Yes, CVE-2022-39818 requires authentication as the vulnerability can only be exploited by authenticated users.