CVE-2025-24937: Access to local file system and its content
File contents could be read from the local file system by an attacker. Additionally, malicious code could be inserted in the file, leading to a full compromise of the web application and the container it is running on.
The vulnerable component is bound to the network stack and the set of possible attackers extends up to and including the entire Internet. The web application allows arbitrary files to be included in a file that was downloadable and executable by the web server.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-24937?
CVE-2025-24937 is considered a critical vulnerability as it allows attackers to read local file contents and insert malicious code.
How do I fix CVE-2025-24937?
To fix CVE-2025-24937, update the Nokia Wavesuite NOC to the latest version as per the vendor's security advisory.
What components are affected by CVE-2025-24937?
CVE-2025-24937 affects Nokia Wavesuite NOC versions 23.6, 23.12, and 24.6.
What are the potential consequences of exploiting CVE-2025-24937?
Exploiting CVE-2025-24937 could lead to full compromise of the web application and its underlying container.
Who is at risk for CVE-2025-24937?
Organizations using affected versions of Nokia Wavesuite NOC are at risk for CVE-2025-24937.