CVE-2022-45899

EUVD-2022-48746
Nokia Broadcast Message Center (BMC) before 13.1 allows an unauthenticated remote attacker to do OS command injection as root via shell metacharacters in the Log Scanner Search Pattern field.
OS Command Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.5 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 70.45%
Affected Products (NVD)
VendorProductVersion
nokiabroadcast_message_center
𝑥
< 13.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://nokia.com
https://www.exploit-db.com/exploits/51896
https://www.exploit-db.com/exploits/51896