CoreCVE
Back

HIGH

An issue was discovered in NOKIA AMS 9.7.05

Published Sep 5, 2023

Description

An issue was discovered in NOKIA AMS 9.7.05. Remote Code Execution exists via the debugger of the ipAddress variable. A remote user, authenticated to the AMS server, could inject code in the PING function. The privileges of the command executed depend on the user that runs the service.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-94

Code Injection

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Sep 5, 2023
Updated Aug 3, 2024
Reserved Sep 29, 2022
Link CVE-2022-41763
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2022-41763
Red Hat
Severity n/a
Public date n/a
Links CVE-2022-41763
ENISA EUVD
Assigner mitre
Published Sep 5, 2023
Updated Aug 3, 2024
Exploited since n/a
Link EUVD-2022-44934
EUVD-2022-44934