Medium severity · published May 25, 2022
CVE-2021-35487
Nokia Broadcast Message Center through 11.1.0 allows an authenticated user to perform a Boolean Blind SQL Injection attack on the endpoint /owui/block/send-receive-updates (for…
6.5
CVSS
1%
EPSS
No
On KEV
Description
Nokia Broadcast Message Center through 11.1.0 allows an authenticated user to perform a Boolean Blind SQL Injection attack on the endpoint /owui/block/send-receive-updates (for the Manage Alerts page) via the extIdentifier HTTP POST parameter. This allows an attacker to obtain the database user, database name, and database version information, and potentially database data.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 63% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BM
Broadcast Message Center · Nokia
through 11.1.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-35487
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-35487
Exploit
https://www.gruppotim.it/it/footer/red-team.html
Vendor Advisory
https://www.nokia.com/notices/responsible-disclosure/
More from Broadcast Message Center
6.5
CVE-2022-45899
Nokia Broadcast Message Center (BMC) before 13.1 allows an unauthenticated remote attacker to do OS command injection as root via shell metacharacters in the Log Scanner Search…