CVE-2022-40713

6.5 mediumEPSS 1.3%

Medium (6.5) in nokia 1350 optical management system. EPSS 1.3% chance of exploitation in the next 30 days.

An issue was discovered in NOKIA 1350OMS R14.2. Multiple Relative Path Traversal issues exist in different specific endpoints via the file parameter, allowing a remote authenticated attacker to read files on the filesystem arbitrarily.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2022-09-19
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

nokia:1350_optical_management_system

References

https://www.gruppotim.it/it/footer/red-team.html
https://www.gruppotim.it/it/footer/red-team.html

Check your stack JSON