Input Handling Flaw in ONT/Beacon Device from Nokia

CVE-2025-9974

What is CVE-2025-9974?

The ONT/Beacon device by Nokia features a critical input handling flaw in its unified WEBUI application. This vulnerability allows low-privileged authenticated users to exploit insufficient validation of user-supplied data, enabling them to execute arbitrary commands on the device's operating system. Such exploitation could compromise the device's confidentiality, integrity, and availability, posing a serious security threat to users reliant on the ONT/Beacon system.

References