CVE-2021-31932
Critical
Description
Nokia BTS TRS web console FTM_W20_FP2_2019.08.16_0010 allows Authentication Bypass. A malicious unauthenticated user can get access to all the functionalities exposed via the web panel, circumventing the authentication process, by using URL encoding for the . (dot) character.
SeverityCritical
CVSS9.8
Exploit probability—
ProductNokia Bts Trs Web Console
PublishedFeb 11, 2022
First seenFeb 11, 2022
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nokia bts_trs_web_console | ftm_w20_fp2_2019.08.16_0010 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.