CVE-2022-28863: Nokia Netact

High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days.

An issue was discovered in Nokia NetAct 22. A remote user, authenticated to the website, can visit the Site Configuration Tool section and arbitrarily upload potentially dangerous files without restrictions via the /netact/sct dir parameter in conjunction with the operation=upload value.

Affected products

• Nokia Netact: version 22.0.0.62 only

Published 2023-07-24. Last modified 2026-06-17.