6.5
CVE-2022-39816
- EPSS 0.22%
- Veröffentlicht 13.09.2022 21:15:09
- Zuletzt bearbeitet 21.11.2024 07:18:18
- Quelle cve@mitre.org
- Teams Watchlist Login
- Unerledigt Login
In NOKIA 1350 OMS R14.2, Insufficiently Protected Credentials (cleartext administrator password) occur in the edit configuration page. Exploitation requires an authenticated attacker.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Nokia ≫ 1350 Optical Management System Version14.2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.22% | 0.45 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 6.5 | 2.8 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
|
CWE-522 Insufficiently Protected Credentials
The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.