Nokia Affix vulnerabilities

4 CVEs affecting Nokia Affix, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2005-2716, published 2005-08-29.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2005-2277, published 2005-07-15. High severity, CVSS 10.0. EPSS: 12.9% chance of exploitation in the next 30 days. Bluetooth FTP client (BTFTP) in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename argument of a PUT command.
CVE-2005-2250, published 2005-07-13. High severity, CVSS 7.5. EPSS: 10.3% chance of exploitation in the next 30 days. Buffer overflow in Bluetooth FTP client (BTFTP) in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrary code via a long filename in an OBEX file share.
CVE-2005-2716, published 2005-08-29. High severity, CVSS 7.5. EPSS: 2.6% chance of exploitation in the next 30 days. The event_pin_code_request function in the btsrv daemon (btsrv.c) in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in a Bluetooth device…
CVE-2005-1294, published 2005-04-24. High severity, CVSS 7.2. EPSS: 0.8% chance of exploitation in the next 30 days. The affix_sock_register in the Affix Bluetooth Protocol Stack for Linux might allow local users to gain privileges via a socket call with a negative protocol value, which is used as an array index.