CVE-2022-41761: Nokia Network Functions Manager For Transport

Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days.

An issue was discovered in NOKIA NFM-T R19.9. An Absolute Path Traversal vulnerability exists under /cgi-bin/R19.9/viewlog.pl of the VM Manager WebUI via the logfile parameter, allowing a remote authenticated attacker to read arbitrary files.

Affected products

• Nokia Network Functions Manager For Transport: version 19.9 only

Published 2023-12-25. Last modified 2026-06-17.