VYPR
Unrated severityNVD Advisory· Published Mar 25, 2021· Updated Aug 3, 2024

CVE-2021-26597

CVE-2021-26597

Description

An issue was discovered in Nokia NetAct 18A. A remote user, authenticated to the NOKIA NetAct Web Page, can visit the Site Configuration Tool web site section and arbitrarily upload potentially dangerous files without restrictions via the /netact/sct dir parameter in conjunction with the operation=upload value.

Affected products

2
  • Nokia/NetActdescription
  • Nokia/NetActllm-fuzzy
    Range: =18A

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.