CVE-2022-39816

CVE-2022-39816 – Nokia 1350 OMS Optical Management System

Vulnerability Description: Insufficiently Protected Credentials - CWE-522

Software Version: R14.2

NISThttps://nvd.nist.gov/vuln/detail/CVE-2022-39816

CVSv3: 6.5

Severity: Medium

Credits: Luca Carbone, Fabio Romano, Stefano Scipioni, Massimiliano Brolli

In NOKIA 1350 OMS R14.2, Insufficiently Protected Credentials (cleartext administrator password) occur in the edit configuration page. Exploitation requires an authenticated attacker.