CVE-2022-41763

An issue was discovered in NOKIA AMS 9.7.05. Remote Code Execution exists via the debugger of the ipAddress variable. A remote user, authenticated to the AMS server, could inject code in the PING function. The privileges of the command executed depend on the user that runs the service.

CVSS v3.1 NVD

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

1.48% chance of exploitation in the next 30 days, 73rd percentile

Published

2023-09-05

Updated

2024-08-03

Proof-of-concept exploits (1)

• https://www.gruppotim.it/it/footer/red-team.html

References

• CVE Record
• NVD entry