VULNERABILITY INTELLIGENCE

CVE-2022-45899

CVSS score6.5 MEDIUM
EPSS probability1.36%
CISA KEVNot currently listed
Published2026-05-08
Last modified2026-08-12
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Description

Nokia Broadcast Message Center (BMC) before 13.1 allows an unauthenticated remote attacker to do OS command injection as root via shell metacharacters in the Log Scanner Search Pattern field.

Weakness classification

  • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Primary references