CVE-2025-24938
BaseFortify
Publication date: 2025-07-21
Last updated on: 2025-08-11
Assigner: Nokia
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| nokia | wavesuite_noc | 23.6 |
| nokia | wavesuite_noc | 23.12 |
| nokia | wavesuite_noc | 24.6 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-78 | The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
CVE-2025-24938 is a command injection vulnerability in Nokia's WaveSuite NOC web application. It occurs because user input is not properly filtered before being passed to operating system commands during user creation. An attacker with administrator privileges in the application can exploit this to execute arbitrary commands on the underlying OS with the webserver's permissions. The vulnerable component is network-exposed, potentially accessible from the Internet. [1]
How can this vulnerability impact me? :
This vulnerability can have severe impacts including unauthorized execution of commands on the operating system, leading to full compromise of the webserver environment. It affects confidentiality, integrity, and availability of the system, allowing an attacker to manipulate data, disrupt services, or gain further access within the network. [1]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
Detection of this vulnerability involves checking for unfiltered command injection possibilities during user creation in the web application. Since the vulnerability allows command injection via user input in the User Management interface, monitoring logs for unusual command execution or unexpected system commands triggered by the webserver user context can help. Specific commands are not provided in the resources, but general approaches include reviewing web server logs, enabling audit logging for user creation actions, and using network monitoring tools to detect suspicious activity. No explicit detection commands are given. [1]
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation involves upgrading the affected Nokia WaveSuite NOC products to version 24.6 FP3 or later, where the vulnerability has been fixed. Restricting administrator access to the web application and limiting exposure of the vulnerable component to the Internet can also reduce risk until the patch is applied. [1]