Privilege Escalation Vulnerability in Nokia FastMile Device

CVE-2021-45896

Summary

Nokia FastMile 3TG00118ABAD52 devices are vulnerable to a privilege escalation attack that allows an authenticated user to gain elevated privileges. This occurs through the manipulation of the 'is_ctc_admin' parameter during the access of 'login_web_app.cgi', combined with the capabilities associated with the Import Config File feature. Attackers taking advantage of this vulnerability could potentially alter device configurations without adequate authorization.

References