CVE-2022-40715: Nokia 1350 Optical Management System

Medium severity, CVSS 6.5. EPSS: 1.3% chance of exploitation in the next 30 days.

An issue was discovered in NOKIA 1350OMS R14.2. An Absolute Path Traversal vulnerability exists for a specific endpoint via the logfile parameter, allowing a remote authenticated attacker to read files on the filesystem arbitrarily.

Affected products

• Nokia 1350 Optical Management System: version 14.2 only

Published 2022-09-19. Last modified 2026-06-17.