CVE-2022-45899

6.5 mediumEPSS 1.4%

Medium (6.5) in nokia broadcast message center. EPSS 1.4% chance of exploitation in the next 30 days.

Nokia Broadcast Message Center (BMC) before 13.1 allows an unauthenticated remote attacker to do OS command injection as root via shell metacharacters in the Log Scanner Search Pattern field.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 71% of CVEs (scores of 2026-10-31)
CWE: CWE-78
Published: 2026-05-08
Modified: 2026-08-12
Record from: the NVD, synced 2026-10-19

Affected

nokia:broadcast_message_center

References

https://nokia.com
https://www.exploit-db.com/exploits/51896
https://www.exploit-db.com/exploits/51896

Check your stack JSON