Nokia: >> Access Management System Security Vulnerabilities
An issue was discovered in NOKIA AMS 9.7.05. Remote Code Execution exists via the debugger of the ipAddress variable. A remote user, authenticated to the AMS server, could inject code in the PING function. The privileges of the command executed depend on the user that runs the service.
CVSS Score
8.8
EPSS Score
0.015
Published
2023-09-05