Skip to content
CVE PROGRAM SOURCE RECORD8.0 High

CVE-2025-9974

Insufficient Input Validation on WEBUI in Nokia ONT/Beacon product

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Nokia

Description

The unified WEBUI application of the ONT/Beacon device contains an input handling flaw that allows authenticated users to trigger unintended system-level command execution. Due to insufficient validation of user-supplied data, a low-privileged authenticated attacker may be able to execute arbitrary commands on the underlying ONT/Beacon operating system, potentially impacting the confidentiality, integrity, and availability of the device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Nokia Nokia ONT

Default version status: affected

  • Releases prior to BBDR2503affected
  • BBDR2503 and later releasesunaffected

References