Authentication Bypass Vulnerability in Nokia's BTS TRS Web Console
CVE-2021-31932

9.8CRITICAL

Key Information:

Vendor

Nokia
Status
Bts Trs Web Console
Vendor
CVE Published:
11 February 2022

What is CVE-2021-31932?

The Nokia BTS TRS web console, specifically the version FTM_W20_FP2_2019.08.16_0010, is susceptible to an authentication bypass vulnerability. This allows unauthorized users to exploit the web panel by manipulating the authentication mechanism through URL encoding of the dot (.) character. Consequently, attackers can gain access to all functionalities exposed via the web interface without proper authentication, posing significant security risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://packetstormsecurity.com/files/165964/Nokia-Transpo...
x_refsource_MISC

EPSS Score

7% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.