If Security Hardening guide rules are not followed, then Nokia WaveLite products allow a local user to create new users with administrative privileges by manipulating a web request. This affects (for example) WaveLite Metro 200 and Fan, WaveLite Metro 200 OPS and Fans, WaveLite Metro 200 and F2B fans, WaveLite Metro 200 OPS and F2B fans, WaveLite Metro 200 NE and F2B fans, and WaveLite Metro 200 NE OPS and F2B fans.
References
| Link | Resource |
|---|---|
| https://nokia.com | Product |
| https://www.nokia.com/about-us/security-and-privacy/product-security-advisory/cve-2023-22618/ | Vendor Advisory |
| https://nokia.com | Product |
| https://www.nokia.com/about-us/security-and-privacy/product-security-advisory/cve-2023-22618/ | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
| AND |
|
Configuration 3 (hide)
| AND |
|
Configuration 4 (hide)
| AND |
|
Configuration 5 (hide)
| AND |
|
Configuration 6 (hide)
| AND |
|
History
21 Nov 2024, 07:45
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://nokia.com - Product | |
| References | () https://www.nokia.com/about-us/security-and-privacy/product-security-advisory/cve-2023-22618/ - Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.1 |
20 Sep 2024, 14:35
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-284 |
06 Oct 2023, 16:23
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:nokia:wavelite_metro_200_ops_and_f2b_fans_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:nokia:wavelite_metro_200_ne_and_f2b_fans_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:nokia:wavelite_metro_200_ne_ops_and_f2b_fans_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:nokia:wavelite_metro_200_and_f2b_fans_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:nokia:wavelite_metro_200_and_fan_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:nokia:wavelite_metro_200_ne_ops_and_f2b_fans:-:*:*:*:*:*:*:* cpe:2.3:o:nokia:wavelite_metro_200_ops_and_fans_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:nokia:wavelite_metro_200_and_f2b_fans:-:*:*:*:*:*:*:* cpe:2.3:h:nokia:wavelite_metro_200_ne_and_f2b_fans:-:*:*:*:*:*:*:* cpe:2.3:h:nokia:wavelite_metro_200_and_fan:-:*:*:*:*:*:*:* cpe:2.3:h:nokia:wavelite_metro_200_ops_and_f2b_fans:-:*:*:*:*:*:*:* cpe:2.3:h:nokia:wavelite_metro_200_ops_and_fans:-:*:*:*:*:*:*:* |
|
| CWE | NVD-CWE-Other | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
| References | (MISC) https://www.nokia.com/about-us/security-and-privacy/product-security-advisory/cve-2023-22618/ - Vendor Advisory | |
| References | (MISC) https://nokia.com - Product | |
| First Time |
Nokia wavelite Metro 200 Ops And Fans
Nokia wavelite Metro 200 And F2b Fans Nokia wavelite Metro 200 Ne And F2b Fans Nokia wavelite Metro 200 And Fan Firmware Nokia wavelite Metro 200 Ne Ops And F2b Fans Firmware Nokia wavelite Metro 200 Ne Ops And F2b Fans Nokia wavelite Metro 200 And Fan Nokia wavelite Metro 200 Ops And Fans Firmware Nokia wavelite Metro 200 Ne And F2b Fans Firmware Nokia wavelite Metro 200 Ops And F2b Fans Firmware Nokia Nokia wavelite Metro 200 Ops And F2b Fans Nokia wavelite Metro 200 And F2b Fans Firmware |
04 Oct 2023, 12:56
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-10-04 12:15
Updated : 2024-11-21 07:45
NVD link : CVE-2023-22618
Mitre link : CVE-2023-22618
CVE.ORG link : CVE-2023-22618
JSON object : View
Products Affected
nokia
- wavelite_metro_200_ops_and_f2b_fans
- wavelite_metro_200_ne_and_f2b_fans
- wavelite_metro_200_ne_ops_and_f2b_fans_firmware
- wavelite_metro_200_ops_and_fans_firmware
- wavelite_metro_200_ops_and_f2b_fans_firmware
- wavelite_metro_200_and_f2b_fans
- wavelite_metro_200_and_fan
- wavelite_metro_200_ne_and_f2b_fans_firmware
- wavelite_metro_200_ne_ops_and_f2b_fans
- wavelite_metro_200_ops_and_fans
- wavelite_metro_200_and_fan_firmware
- wavelite_metro_200_and_f2b_fans_firmware
CWE