CVE-2022-46408: Medium severity ericsson network manager vulnerability
Ericsson Network Manager (ENM), versions prior to 22.1, contains a vulnerability in the application Network Connectivity Manager (NCM) where improper Neutralization of Formula Elements in a CSV File can lead to remote code execution or data leakage via maliciously injected hyperlinks. The attacker would need admin/elevated access to exploit the vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for Ericsson Network Manager?
The vulnerability ID for Ericsson Network Manager is CVE-2022-46408.
What is the severity of CVE-2022-46408?
The severity of CVE-2022-46408 is medium, with a CVSS score of 6.8.
What is the affected software for CVE-2022-46408?
The affected software for CVE-2022-46408 is Ericsson Network Manager versions prior to 22.1.
What is the CWE ID for CVE-2022-46408?
The CWE ID for CVE-2022-46408 is CWE-1236.
How can the vulnerability in Ericsson Network Manager be exploited?
The vulnerability in Ericsson Network Manager can be exploited through improper neutralization of formula elements in a CSV file, leading to remote code execution or data leakage via maliciously injected hyperlinks.