CVE-2021-45896

8.8HIGH

Key Information:

Vendor
Nokia
Status
Fastmile Firmware
Vendor
CVE Published:
27 December 2021

Summary

Nokia FastMile 3TG00118ABAD52 devices allow privilege escalation by an authenticated user via is_ctc_admin=1 to login_web_app.cgi and use of Import Config File.

References

https://eddiez.me/hacking-the-nokia-fastmile/
x_refsource_MISC
https://gist.github.com/thedroidgeek/80c379aa43b71015d71d...
x_refsource_MISC

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.