Low severity · published Oct 17, 2024
CVE-2023-6728
Nokia SR OS: BOF File Encryption Vulnerability
3.3
CVSS
0.1%
EPSS
No
On KEV
Description
Nokia SR OS bof.cfg file encryption is vulnerable to a brute force attack. This weakness allows an attacker in possession of the encrypted file to decrypt the bof.cfg file and obtain the BOF configuration content.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 0% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SO
SR OS (7250 IXR, 7450 ESS, 7750 SR, 7950 IXR, VSR), 7705 SAR OS, 7210 SAS OS · Nokia
All supported releases prior to Release 24 · source: vendor
Affected product
SO
SR OS (7250 IXR, 7450 ESS, 7750 SR, 7950 IXR, VSR), 7705 SAR OS, 7210 SAS OS
Nokia
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-6728
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-6728
www.nokia.com
https://www.nokia.com/about-us/security-and-privacy/product-security-advisory/cve-2023-6728/
More from SR OS (7250 IXR, 7450 ESS, 7750 SR, 7950 IXR, VSR), 7705 SAR OS, 7210 SAS OS
7.3
CVE-2023-6729
Nokia SR OS: File Access Security Vulnerability