← Database

CVE-2022-41763

HIGH CVSS: 8.8 Published: 2023-09-05 Modified: 2026-06-17

Description

An issue was discovered in NOKIA AMS 9.7.05. Remote Code Execution exists via the debugger of the ipAddress variable. A remote user, authenticated to the AMS server, could inject code in the PING function. The privileges of the command executed depend on the user that runs the service.

Affected Platforms

Nokia Access Management System

Weakness Type

CWE-94

References