What’s Vulnerable › Vulnerabilities
CVE-2022-39818
- Severity: high (CVSS 8.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 2.2% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2023-12-25 · updated 2026-06-17
- Weakness: CWE-78
Description
In NOKIA NFM-T R19.9, an OS Command Injection vulnerability occurs in /cgi-bin/R19.9/log.pl of the VM Manager WebUI via the cmd HTTP GET parameter. This allows authenticated users to execute commands, with root privileges, on the operating system.
Affected products
References
Get alerted when CVE-2022-39818 or the next vulnerability affects your stack