CoreCVE
Back

HIGH

Improper verification of a user input in Open Source MANO v7-v12 allows an authenticated attacker to execute arbitrary code within the LCM module container via a Virtual Network Function (VNF) descriptor

Published Apr 22, 2024

Description

Improper verification of a user input in Open Source MANO v7-v12 allows an authenticated attacker to execute arbitrary code within the LCM module container via a Virtual Network Function (VNF) descriptor. An attacker may be able execute code to change the normal execution of the OSM components, retrieve confidential information, or gain access other parts of a Telco Operator infrastructure other than OSM itself.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-286

CWE-77

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Apr 22, 2024
Updated Aug 3, 2024
Reserved Jul 11, 2022
Link CVE-2022-35503
CISA Vulnrichment
Updated Apr 22, 2024
NVD
Status Deferred
Modified Jun 17, 2026
Link CVE-2022-35503
Red Hat
Severity n/a
Public date n/a
Links CVE-2022-35503