What’s Vulnerable › Vulnerabilities
CVE-2022-45899
- Severity: medium (CVSS 6.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.4% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2026-05-08 · updated 2026-08-12
- Weakness: CWE-78
Description
Nokia Broadcast Message Center (BMC) before 13.1 allows an unauthenticated remote attacker to do OS command injection as root via shell metacharacters in the Log Scanner Search Pattern field.
Affected products
- Nokia Broadcast Message Center: before 13.1 — fixed in 13.1
How to fix
Upgrade to a fixed version: Nokia Broadcast Message Center 13.1. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2022-45899 or the next vulnerability affects your stack