attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
Nokia 1830 Global Express (GX)
Classified as
CWE-284 (Improper Access Control)
Affected Products, Subsystems & Sectors
Vendor
Product
Affected Versions
Patch Status
Nokia
Nokia 1830 Global Express (GX)
Subsystems
General OT
Sectors
Multiple
What to Know
Nokia 1830 Global Express (GX) is vulnerable to a CLI ACL Bypass vulnerability where a low-privileged authenticated attacker can bypass the SSH isolation mechanism and gain access to the underlying operating system shell via a custom SSH command. This issue occurs by default in the system and is not the result of misconfiguration. (NVD)
What to Do
Monitor Nokia's web page for any future patch releases.