← Database

CVE-2022-39818

HIGH CVSS: 8.8 Published: 2023-12-25 Modified: 2026-06-17

Description

In NOKIA NFM-T R19.9, an OS Command Injection vulnerability occurs in /cgi-bin/R19.9/log.pl of the VM Manager WebUI via the cmd HTTP GET parameter. This allows authenticated users to execute commands, with root privileges, on the operating system.

Affected Platforms

Nokia Network Functions Manager For Transport

Weakness Type

CWE-78

References