CVE-2025-24936: Insufficient Validation of Input in the URL
The web application allows user input to pass unfiltered to a command executed on the underlying operating system. The vulnerable component is bound to the network stack and the set of possible attackers extends up to and including the entire Internet.
An attacker with low privileged access to the application has the potential to execute commands on the operating system under the context of the webserver.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-24936?
CVE-2025-24936 is classified as a critical severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2025-24936?
To fix CVE-2025-24936, update to the latest version of Nokia Wavesuite Noc that addresses the vulnerability.
Who is affected by CVE-2025-24936?
CVE-2025-24936 affects users of Nokia Wavesuite Noc versions 23.6, 23.12, and 24.6.
What kind of attack can exploit CVE-2025-24936?
CVE-2025-24936 can be exploited by an attacker to execute arbitrary commands on the underlying operating system.
Can CVE-2025-24936 be exploited from the internet?
Yes, CVE-2025-24936 allows for remote exploitation, therefore attackers across the Internet can potentially exploit this vulnerability.