Nokia
67 CVEs across 121 Nokia products. Browse Nokia vulnerabilities, severities, and proof-of-concept exploits.
Nokia products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-7406 | High | 7.8 | 2026-06-30 | Nokia MantaRay NM is vulnerable to a sudo privilege escalation vulnerability where a local attacker possessing administrative (local admin) privileges can esca… |
CVE-2025-24816 | Medium | 6.5 | 2026-06-30 | Nokia MantaRay is subject to an Improper Access Control vulnerability due to insufficient authorization within the API. Successful exploitation could allow an… |
CVE-2025-24815 | High | 7.8 | 2026-06-30 | Nokia MantaRay NM is subject to an unrestricted file upload vulnerability due to insufficient file type validation. Successful exploitation could allow an auth… |
CVE-2025-9912 | Medium | 6.3 | 2026-06-16 | Nokia SR Linux is vulnerable to a local privilege escalation vulnerability. Successful exploitation of this vulnerability may allow an authenticated user to ex… |
CVE-2025-10262 | Medium | 6.3 | 2026-06-16 | Nokia SR Linux is vulnerable to local privilege escalation vulnerability due to unsanitized format validation. Successful exploitation of this vulnerability ma… |
CVE-2022-45899 | Medium | 6.5 | 2026-05-08 | Nokia Broadcast Message Center (BMC) before 13.1 allows an unauthenticated remote attacker to do OS command injection as root via shell metacharacters in the L… |
CVE-2025-24819 | Medium | 5.7 | 2026-04-07 | Nokia MantaRay NM is vulnerable to a Relative Path Traversal vulnerability due to improper validation of input parameter on the file system in Software Manager… |
CVE-2025-24818 | High | 8.0 | 2026-04-07 | Nokia MantaRay NM is vulnerable to an OS command injection vulnerability due to improper neutralization of special elements used in an OS command in Log Search… |
CVE-2025-24817 | High | 8.0 | 2026-04-07 | Nokia MantaRay NM is vulnerable to an OS command injection vulnerability due to improper neutralization of special elements used in an OS command in Symptom Co… |
CVE-2023-31044 | Low | 2.0 | 2026-03-03 | An issue was discovered in Nokia Impact before Mobile 23_FP1. In Impact DM 19.11 onwards, a remote authenticated user, using the Add Campaign functionality, ca… |
CVE-2021-35486 | High | 8.1 | 2026-03-03 | A Cross-Site Request Forgery (CSRF) vulnerability in Nokia IMPACT through 19.11.2.10-20210118042150283 allows a remote attacker to import and overwrite the ent… |
CVE-2021-35485 | High | 8.0 | 2026-03-03 | The Applications component of Nokia IMPACT version through 19.11.2.10-20210118042150283 allows an authenticated user to arbitrarily upload server-side executab… |
CVE-2021-35484 | High | 8.2 | 2026-03-03 | Nokia IMPACT through 19.11.2.10-20210118042150283 allows an authenticated user to perform a Time-based Boolean Blind SQL Injection attack on the endpoint /ui/r… |
CVE-2021-35483 | Medium | 4.1 | 2026-03-03 | The Applications component of Nokia IMPACT version through 19.11.2.10-20210118042150283 allows an authenticated user to arbitrarily upload JavaScript files via… |
CVE-2025-10258 | Medium | 6.3 | 2026-02-05 | Infinera DNA is vulnerable to a time-based SQL injection vulnerability due to insufficient input validation, which may result in leaking of sensitive informati… |
CVE-2025-9974 | High | 8.0 | 2026-02-02 | The unified WEBUI application of the ONT/Beacon device contains an input handling flaw that allows authenticated users to trigger unintended system-level comma… |
CVE-2025-0980 | Medium | 6.4 | 2026-01-07 | Nokia SR Linux is vulnerable to an authentication vulnerability allowing unauthorized access to the JSON-RPC service. When exploited, an invalid validation al… |
CVE-2025-65885 | Medium | 5.1 | 2025-12-26 | An issue was discovered in the Delight Custom Firmware (CFW) for Nokia Symbian Belle devices on Nokia 808 (Delight v1.8), Nokia N8 (Delight v6.7), Nokia E7 (De… |
CVE-2025-27020 | Critical | 9.8 | 2025-12-08 | Improper configuration of the SSH service in Infinera MTC-9 allows an unauthenticated attacker to execute arbitrary commands and access data on file system . … |
CVE-2025-27019 | Critical | 9.8 | 2025-12-08 | Remote shell service (RSH) in Infinera MTC-9 version R22.1.1.0275 allows an attacker to utilize password-less user accounts and obtain system access by activ… |
CVE-2025-26489 | Medium | 6.5 | 2025-12-08 | Improper input validation in the Netconf service in Infinera MTC-9 allows remote authenticated users to crash the service and reboot the appliance, thus causi… |
CVE-2025-26488 | High | 7.5 | 2025-12-08 | Improper Input Validation vulnerability in Infinera MTC-9 allows remote unauthenticated users to crash the service and cause a reboot of the appliance, thus c… |
CVE-2025-26487 | High | 8.6 | 2025-12-08 | Server-Side Request Forgery (SSRF) vulnerability in Infinera MTC-9 version allows remote unauthenticated users to gain access to other network resources usin… |
CVE-2023-49565 | High | 8.4 | 2025-09-18 | The cbis_manager Podman container is vulnerable to remote command execution via the /api/plugins endpoint. Improper sanitization of the HTTP Headers X-FILENAME… |
CVE-2023-49564 | High | 8.8 | 2025-09-18 | The CBIS/NCS Manager API is vulnerable to an authentication bypass. By sending a specially crafted HTTP header, an unauthenticated user can gain unauthorized a… |
CVE-2025-24938 | High | 8.4 | 2025-07-21 | The web application allows user input to pass unfiltered to a command executed on the underlying operating system. An attacker with high privileged access (adm… |
CVE-2025-24937 | Critical | 9.0 | 2025-07-21 | File contents could be read from the local file system by an attacker. Additionally, malicious code could be inserted in the file, leading to a full compromise… |
CVE-2025-24936 | Critical | 9.0 | 2025-07-21 | The web application allows user input to pass unfiltered to a command executed on the underlying operating system. The vulnerable component is bound to the net… |
CVE-2025-27026 | Medium | 4.9 | 2025-07-02 | A missing double-check feature in the WebGUI for CLI deactivation in Infinera G42 version R6.1.3 allows an authenticated administrator to make other manageme… |
CVE-2025-27024 | Medium | 6.5 | 2025-07-02 | Unrestricted access to OS file system in SFTP service in Infinera G42 version R6.1.3 allows remote authenticated users to read/write OS files via SFTP connec… |
CVE-2025-27023 | Medium | 6.5 | 2025-07-02 | Lack or insufficent input validation in WebGUI CLI web in Infinera G42 version R6.1.3 allows remote authenticated users to read all OS files via crafted CLI… |
CVE-2025-27022 | High | 7.5 | 2025-07-02 | A path traversal vulnerability of the WebGUI HTTP endpoint in Infinera G42 version R6.1.3 allows remote authenticated users to download all OS files via HTTP… |
CVE-2025-27021 | High | 7.0 | 2025-07-02 | The misconfiguration in the sudoers configuration of the operating system in Infinera G42 version R6.1.3 allows low privileged OS users to read/write physica… |
CVE-2025-24335 | Low | 2.0 | 2025-07-02 | Nokia Single RAN baseband software versions earlier than 24R1-SR 2.1 MP contain a SOAP message input validation flaw, which in theory could potentially be used… |
CVE-2025-24334 | Low | 3.3 | 2025-07-02 | The Nokia Single RAN baseband software earlier than 23R2-SR 1.0 MP can be made to reveal the exact software release version by sending a specific HTTP POST req… |
CVE-2025-24333 | Medium | 6.4 | 2025-07-02 | Nokia Single RAN baseband software earlier than 24R1-SR 1.0 MP contains administrative shell input validation fault, which authenticated admin user can, in the… |
CVE-2025-24332 | High | 7.1 | 2025-07-02 | Nokia Single RAN AirScale baseband allows an authenticated administrative user access to all physical boards after performing a single login to the baseband sy… |
CVE-2025-24331 | Medium | 6.4 | 2025-07-02 | The Single RAN baseband OAM service is intended to run as an unprivileged service. However, it initially starts with root privileges and assigns certain capabi… |
CVE-2025-24330 | Medium | 6.4 | 2025-07-02 | Sending a crafted SOAP "provision" operation message PlanId field within the Mobile Network Operator (MNO) internal Radio Access Network (RAN) management netwo… |
CVE-2025-24329 | Medium | 6.4 | 2025-07-02 | Sending a crafted SOAP "provision" operation message archive field within the Mobile Network Operator (MNO) internal Radio Access Network (RAN) management netw… |
CVE-2025-24328 | Medium | 4.2 | 2025-07-02 | Sending a crafted SOAP "set" operation message within the Mobile Network Operator (MNO) internal Radio Access Network (RAN) management network can cause Nokia… |
CVE-2023-6729 | High | 7.3 | 2024-10-17 | Nokia SR OS routers allow read-write access to the entire file system via SFTP or SCP for users configured with "access console." Consequently, a low privilege… |
CVE-2023-6728 | Low | 3.3 | 2024-10-17 | Nokia SR OS bof.cfg file encryption is vulnerable to a brute force attack. This weakness allows an attacker in possession of the encrypted file to decrypt the… |
CVE-2024-25660 | Critical | 9.0 | 2024-10-01 | The WebDAV service in Infinera TNMS (Transcend Network Management System) 19.10.3 allows a low-privileged remote attacker to conduct unauthorized file operatio… |
CVE-2024-25659 | High | 7.2 | 2024-10-01 | In Infinera TNMS (Transcend Network Management System) 19.10.3, an insecure default configuration of the internal SFTP server on Linux servers allows remote at… |
CVE-2024-25661 | High | 7.7 | 2024-10-01 | In Infinera TNMS (Transcend Network Management System) 19.10.3, cleartext storage of sensitive information in memory of the desktop application TNMS Client all… |
CVE-2024-25658 | Medium | 6.5 | 2024-10-01 | Cleartext storage of passwords in Infinera TNMS (Transcend Network Management System) Server 19.10.3 allows attackers (with access to the database or exported… |
CVE-2024-28808 | Low | 2.7 | 2024-09-30 | An issue was discovered in Infinera hiT 7300 5.60.50. Hidden functionality in the web interface allows a remote authenticated attacker to access reserved infor… |
CVE-2024-28807 | Medium | 6.5 | 2024-09-30 | An issue was discovered in Infinera hiT 7300 5.60.50. Cleartext storage of sensitive information in the memory of the @CT desktop management application allows… |
CVE-2024-28813 | High | 8.4 | 2024-09-30 | An issue was discovered in Infinera hiT 7300 5.60.50. Undocumented privileged functions in the @CT management application allow an attacker to activate remote… |
CVE-2024-28812 | High | 8.8 | 2024-09-30 | An issue was discovered in Infinera hiT 7300 5.60.50. A hidden SSH service (on the local management network interface) with hardcoded credentials allows attack… |
CVE-2024-28811 | Low | 3.3 | 2024-09-30 | An issue was discovered in Infinera hiT 7300 5.60.50. A web application allows a remote privileged attacker to execute applications contained in a specific OS… |
CVE-2024-28810 | Medium | 6.6 | 2024-09-30 | An issue was discovered in Infinera hiT 7300 5.60.50. Sensitive information inside diagnostic files (exported by the @CT application) allows an attacker to ach… |
CVE-2024-28809 | High | 8.8 | 2024-09-30 | An issue was discovered in Infinera hiT 7300 5.60.50. Cleartext storage of sensitive password in firmware update packages allows attackers to access various ap… |
CVE-2022-43675 | Medium | 6.1 | 2023-12-25 | An issue was discovered in NOKIA NFM-T R19.9. Reflected XSS in the Network Element Manager exists via /oms1350/pages/otn/cpbLogDisplay via the filename paramet… |
CVE-2022-41762 | Medium | 6.1 | 2023-12-25 | An issue was discovered in NOKIA NFM-T R19.9. Multiple Reflected XSS vulnerabilities exist in the Network Element Manager via any parameter to log.pl, the benc… |
CVE-2022-41761 | Medium | 6.5 | 2023-12-25 | An issue was discovered in NOKIA NFM-T R19.9. An Absolute Path Traversal vulnerability exists under /cgi-bin/R19.9/viewlog.pl of the VM Manager WebUI via the l… |
CVE-2022-41760 | Medium | 6.5 | 2023-12-25 | An issue was discovered in NOKIA NFM-T R19.9. Relative Path Traversal can occur under /oms1350/data/cpb/log of the Network Element Manager via the filename par… |
CVE-2022-39822 | High | 8.8 | 2023-12-25 | In NOKIA NFM-T R19.9, a SQL Injection vulnerability occurs in /cgi-bin/R19.9/easy1350.pl of the VM Manager WebUI via the id or host HTTP GET parameter. An auth… |
CVE-2022-39820 | Medium | 6.5 | 2023-12-25 | In Network Element Manager in NOKIA NFM-T R19.9, an Unprotected Storage of Credentials vulnerability occurs under /root/RestUploadManager.xml.DRC and /DEPOT/KE… |
CVE-2022-39818 | High | 8.8 | 2023-12-25 | In NOKIA NFM-T R19.9, an OS Command Injection vulnerability occurs in /cgi-bin/R19.9/log.pl of the VM Manager WebUI via the cmd HTTP GET parameter. This allows… |
CVE-2023-41355 | Critical | 9.8 | 2023-11-03 | Chunghwa Telecom NOKIA G-040W-Q Firewall function has a vulnerability of input validation for ICMP redirect messages. An unauthenticated remote attacker can ex… |
CVE-2023-41354 | Medium | 4.0 | 2023-11-03 | Chunghwa Telecom NOKIA G-040W-Q Firewall function does not block ICMP TIMESTAMP requests by default, an unauthenticated remote attacker can exploit this vulner… |
CVE-2023-41353 | High | 8.8 | 2023-11-03 | Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of weak password requirements. A remote attacker with regular user privilege can easily infer the administr… |
CVE-2023-41352 | High | 7.2 | 2023-11-03 | Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of insufficient filtering for user input. A remote attacker with administrator privilege can exploit this v… |
CVE-2023-41351 | Critical | 9.8 | 2023-11-03 | Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of authentication bypass, which allows an unauthenticated remote attacker to bypass the authentication mech… |
CVE-2023-41350 | High | 7.5 | 2023-11-03 | Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of insufficient measures to prevent multiple failed authentication attempts. An unauthenticated remote atta… |
CVE-2023-22618 | High | 8.1 | 2023-10-04 | If Security Hardening guide rules are not followed, then Nokia WaveLite products allow a local user to create new users with administrative privileges by manip… |
CVE-2022-41763 | High | 8.8 | 2023-09-05 | An issue was discovered in NOKIA AMS 9.7.05. Remote Code Execution exists via the debugger of the ipAddress variable. A remote user, authenticated to the AMS s… |
CVE-2023-41376 | High | 7.5 | 2023-08-29 | Nokia Service Router Operating System (SR OS) 22.10 and SR Linux, when error-handling update-fault-tolerance is not enabled, mishandle BGP path attributes. |
CVE-2022-30280 | High | 8.8 | 2023-07-24 | /SecurityManagement/html/createuser.jsf in Nokia NetAct 22 allows CSRF. A remote attacker is able to create users with arbitrary privileges, even administrativ… |
CVE-2022-28867 | Medium | 5.4 | 2023-07-24 | An issue was discovered in Nokia NetAct 22 through the Administration of Measurements website section. A malicious user can edit or add the templateName parame… |
CVE-2022-28865 | Medium | 5.4 | 2023-07-24 | An issue was discovered in Nokia NetAct 22 through the Site Configuration Tool website section. A malicious user can change a filename of an uploaded file to i… |
CVE-2022-28864 | High | 8.8 | 2023-07-24 | An issue was discovered in Nokia NetAct 22 through the Administration of Measurements website section. A malicious user can edit or add the templateName parame… |
CVE-2022-28863 | High | 8.8 | 2023-07-24 | An issue was discovered in Nokia NetAct 22. A remote user, authenticated to the website, can visit the Site Configuration Tool section and arbitrarily upload p… |
CVE-2023-25187 | Medium | 6.3 | 2023-06-16 | An issue was discovered on NOKIA Airscale ASIKA Single RAN devices before 21B. Nokia Single RAN commissioning procedures do not change (factory-time installed)… |
CVE-2023-25188 | Medium | 5.1 | 2023-06-16 | An issue was discovered on NOKIA Airscale ASIKA Single RAN devices before 21B. If/when CSP (as a BTS administrator) removes security hardenings from the Nokia… |
CVE-2023-25186 | Medium | 5.1 | 2023-06-16 | An issue was discovered on NOKIA Airscale ASIKA Single RAN devices before 21B. If/when CSP (as a BTS administrator) removes security hardenings from a Nokia Si… |
CVE-2023-25185 | Low | 3.8 | 2023-06-16 | An issue was discovered on NOKIA Airscale ASIKA Single RAN devices before 21B. A mobile network solution internal fault was found in Nokia Single RAN software… |
CVE-2023-26062 | High | 7.0 | 2023-06-14 | A mobile network solution internal fault is found in Nokia Web Element Manager before 22 R1, in which an authenticated, unprivileged user can execute administr… |
CVE-2022-30759 | High | 8.8 | 2023-05-02 | In Nokia One-NDS (aka Network Directory Server) through 20.9, some Sudo permissions can be exploited by some users to escalate to root privileges and execute a… |
CVE-2022-31244 | High | 7.8 | 2023-04-25 | Nokia OneNDS 17r2 has Insecure Permissions vulnerability that allows for privilege escalation. |
CVE-2023-26058 | Medium | 6.5 | 2023-04-25 | An XXE issue was discovered in Nokia NetAct before 22 FP2211 via an XML document to a Performance Manager page. Input validation and a proper XML parser config… |
CVE-2023-26057 | Medium | 6.5 | 2023-04-25 | An XXE issue was discovered in Nokia NetAct before 22 FP2211 via an XML document to the Configuration Dashboard page. Input validation and a proper XML parser… |
CVE-2023-26059 | Medium | 6.8 | 2023-04-24 | An issue was discovered in Nokia NetAct before 22 SP1037. On the Site Configuration Tool tab, attackers can upload a ZIP file which, when processed, exploits S… |
CVE-2023-26061 | Medium | 6.8 | 2023-04-24 | An issue was discovered in Nokia NetAct before 22 FP2211. On the Scheduled Search tab under the Alarm Reports Dashboard page, users can create a script to inje… |
CVE-2023-26060 | Medium | 6.8 | 2023-04-24 | An issue was discovered in Nokia NetAct before 22 FP2211. On the Working Set Manager page, users can create a Working Set with a name that has a client-side te… |
CVE-2022-2484 | High | 8.4 | 2023-01-06 | The signature check in the Nokia ASIK AirScale system module version 474021A.101 can be bypassed allowing an attacker to run modified firmware. This could r… |
CVE-2022-2483 | High | 8.4 | 2023-01-06 | The bootloader in the Nokia ASIK AirScale system module (versions 474021A.101 and 474021A.102) loads public keys for firmware verification signature. If an at… |
CVE-2022-2482 | High | 8.4 | 2023-01-06 | A vulnerability exists in Nokia’s ASIK AirScale system module (versions 474021A.101 and 474021A.102) that could allow an attacker to place a script on the fil… |
CVE-2022-36222 | High | 8.4 | 2022-12-21 | Nokia Fastmile 3tg00118abad52 devices shipped by Optus are shipped with a default hardcoded admin account of admin:Nq+L5st7o This account can be used locally t… |
CVE-2022-36221 | Medium | 6.5 | 2022-12-21 | Nokia Fastmile 3tg00118abad52 is affected by an authenticated path traversal vulnerability which allows attackers to read any named pipe file on the system. |
CVE-2022-28866 | High | 8.8 | 2022-10-12 | Multiple Improper Access Control was discovered in Nokia AirFrame BMC Web GUI < R18 Firmware v4.13.00. It does not properly validate requests for access to (or… |
CVE-2022-40715 | Medium | 6.5 | 2022-09-19 | An issue was discovered in NOKIA 1350OMS R14.2. An Absolute Path Traversal vulnerability exists for a specific endpoint via the logfile parameter, allowing a r… |
CVE-2022-40714 | Medium | 6.1 | 2022-09-19 | An issue was discovered in NOKIA 1350OMS R14.2. Reflected XSS exists under different /oms1350/* endpoints. |
CVE-2022-40713 | Medium | 6.5 | 2022-09-19 | An issue was discovered in NOKIA 1350OMS R14.2. Multiple Relative Path Traversal issues exist in different specific endpoints via the file parameter, allowing… |
CVE-2022-40712 | Medium | 6.1 | 2022-09-19 | An issue was discovered in NOKIA 1350OMS R14.2. Reflected XSS exists under different /cgi-bin/R14.2* endpoints. |
CVE-2022-38788 | Medium | 4.3 | 2022-09-15 | An issue was discovered in Nokia FastMile 5G Receiver 5G14-B 1.2104.00.0281. Bluetooth on the Nokia ODU uses outdated pairing mechanisms, allowing an attacker… |
CVE-2022-39821 | High | 7.5 | 2022-09-13 | In NOKIA 1350 OMS R14.2, an Insertion of Sensitive Information into an Application Log File vulnerability occurs. The web application stores critical informati… |
CVE-2022-39819 | High | 8.8 | 2022-09-13 | In NOKIA 1350 OMS R14.2, multiple OS Command Injection vulnerabilities occurs. This allows authenticated users to execute commands on the operating system. |