CVE-2022-40713: Nokia 1350 Optical Management System

Medium severity, CVSS 6.5. EPSS: 1.3% chance of exploitation in the next 30 days.

An issue was discovered in NOKIA 1350OMS R14.2. Multiple Relative Path Traversal issues exist in different specific endpoints via the file parameter, allowing a remote authenticated attacker to read files on the filesystem arbitrarily.

Affected products

• Nokia 1350 Optical Management System: version 14.2 only

Published 2022-09-19. Last modified 2026-06-17.