VulnerabilityModified
CVE-2022-39816
Exploitation requires an authenticated attacker.
MEDIUM 6.5EPSS 0.62%
Does this matter?
Lower severity and a low EPSS score (0.62%). Track it; it rarely justifies an emergency change on its own.
Description
In NOKIA 1350 OMS R14.2, Insufficiently Protected Credentials (cleartext administrator password) occur in the edit configuration page. Exploitation requires an authenticated attacker.
- CVSS 3.1
- 6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 0.62% probability · 48th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-522
- Affected
- nokia/1350 optical management system
- Source
- cve@mitre.org
References
- https://www.gruppotim.it/it/footer/red-team.htmlThird Party Advisory
- https://www.gruppotim.it/it/footer/red-team.htmlThird Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.