CoreCVE
Back

MEDIUM

Nokia Broadcast Message Center (BMC) before 13.1 allows an unauthenticated remote attacker to do OS command injection as root via shell metacharacters in the Log Scanner Search Pattern field

Published May 8, 2026

Description

Nokia Broadcast Message Center (BMC) before 13.1 allows an unauthenticated remote attacker to do OS command injection as root via shell metacharacters in the Log Scanner Search Pattern field.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-78

OS Command Injection

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published May 8, 2026
Updated May 8, 2026
Reserved Nov 26, 2022
Link CVE-2022-45899
CISA Vulnrichment
Updated May 8, 2026
NVD
Status Analyzed
Modified Aug 12, 2026
Link CVE-2022-45899
Red Hat
Severity n/a
Public date n/a
Links CVE-2022-45899