NO
Vendor
Nokia
175
CVEs
0
On KEV
2
New 30D
Products
N1–
Nokia 1830 Global Express (GX)
Nokia
2 CVEs0 on KEV2 new
NE8.8
Netact
Nokia
12 CVEs0 on KEV0 new
1O9.8
1350 Optical Management System
Nokia
10 CVEs0 on KEV0 new
H78.8
Hit 7300 Firmware
Nokia
7 CVEs0 on KEV0 new
IM8.8
Impact
Nokia
7 CVEs0 on KEV0 new
NF8.8
Network Functions Manager For Transport
Nokia
7 CVEs0 on KEV0 new
GF9.8
G-040w-q Firmware
Nokia
6 CVEs0 on KEV0 new
IG9.8
I-240w-q Gpon Ont Firmware
Nokia
6 CVEs0 on KEV0 new
MN8.0
MantaRay NM
Nokia
6 CVEs0 on KEV0 new
GF7.8
G42 Firmware
Nokia
5 CVEs0 on KEV0 new
IM9.8
Infinera Mtc-9 Firmware
Nokia
5 CVEs0 on KEV0 new
AF–
Affix
Nokia
4 CVEs0 on KEV0 new
AA7.8
Asika Airscale Firmware
Nokia
4 CVEs0 on KEV0 new
TN9.0
Transcend Network Management System
Nokia
4 CVEs0 on KEV0 new
6N–
6131 Nfc
Nokia
3 CVEs0 on KEV0 new
AA8.8
Asik Airscale 474021a.101 Firmware
Nokia
3 CVEs0 on KEV0 new
ED–
Electronic Documentation
Nokia
3 CVEs0 on KEV0 new
FF8.8
Fastmile Firmware
Nokia
3 CVEs0 on KEV0 new
GM–
Groupwise Mobile Server
Nokia
3 CVEs0 on KEV0 new
HE7.8
Heif
Nokia
3 CVEs0 on KEV0 new
IM–
Intellisync Mobile Suite
Nokia
3 CVEs0 on KEV0 new
IW–
Intellisync Wireless Email Express
Nokia
3 CVEs0 on KEV0 new
WN9.0
Wavesuite Noc
Nokia
3 CVEs0 on KEV0 new
AA8.8
Asik Airscale 474021a.102 Firmware
Nokia
2 CVEs0 on KEV0 new
BM6.5
Broadcast Message Center
Nokia
2 CVEs0 on KEV0 new
IM8.8
Impact Mobile
Nokia
2 CVEs0 on KEV0 new
N7–
N70
Nokia
2 CVEs0 on KEV0 new
N9–
N95
Nokia
2 CVEs0 on KEV0 new
NS5.4
NSP
Nokia
2 CVEs0 on KEV0 new
SY–
Symbian
Nokia
2 CVEs0 on KEV0 new
1P6.1
1830 Photonic Service Switch-16 Firmware
Nokia
1 CVEs0 on KEV0 new
1P6.1
1830 Photonic Service Switch-32 Firmware
Nokia
1 CVEs0 on KEV0 new
1P6.1
1830 Photonic Service Switch-4 Firmware
Nokia
1 CVEs0 on KEV0 new
32–
3210
Nokia
1 CVEs0 on KEV0 new
6H–
6210 Handset
Nokia
1 CVEs0 on KEV0 new
63–
6310i
Nokia
1 CVEs0 on KEV0 new
76–
7610
Nokia
1 CVEs0 on KEV0 new
846.5
8810 4g Firmware
Nokia
1 CVEs0 on KEV0 new
95–
9500
Nokia
1 CVEs0 on KEV0 new
AM8.8
Access Management System
Nokia
1 CVEs0 on KEV0 new
AB8.8
Airframe Bmc Web Gui R18 Firmware
Nokia
1 CVEs0 on KEV0 new
BT9.8
Bts Trs Web Console
Nokia
1 CVEs0 on KEV0 new
E7–
E75
Nokia
1 CVEs0 on KEV0 new
EF–
E75 Firmware
Nokia
1 CVEs0 on KEV0 new
F54.3
Fastmile 5g Receiver Firmware
Nokia
1 CVEs0 on KEV0 new
FA–
Firewall Appliance
Nokia
1 CVEs0 on KEV0 new
GF4.8
G-120w-f Firmware
Nokia
1 CVEs0 on KEV0 new
GF4.8
G-2425g-a Firmware
Nokia
1 CVEs0 on KEV0 new
GG–
Ggsn
Nokia
1 CVEs0 on KEV0 new
ID6.3
Infinera Dna
Nokia
1 CVEs0 on KEV0 new
IF–
Ip440 Firewall Vpn Appliance
Nokia
1 CVEs0 on KEV0 new
IP–
Ipso
Nokia
1 CVEs0 on KEV0 new
MP–
Multimedia Player
Nokia
1 CVEs0 on KEV0 new
NI–
N810 Internet Tablet
Nokia
1 CVEs0 on KEV0 new
N8–
N82
Nokia
1 CVEs0 on KEV0 new
NP–
Nokia PC Suite
Nokia
1 CVEs0 on KEV0 new
NS6.3
Nokia SR Linux
Nokia
1 CVEs0 on KEV0 new
ON8.8
One-nds
Nokia
1 CVEs0 on KEV0 new
OD7.8
One-network Directory Server
Nokia
1 CVEs0 on KEV0 new
PS–
PC Suite
Nokia
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-34485 | N1 Nokia 1830 Global Express (GX) Nokia | – | Oct 20 | A CLI ACL Bypass vulnerability in Nokia 1830 Global Express (GX) |
| CVE-2026-34484 | N1 Nokia 1830 Global Express (GX) Nokia | – | Oct 20 | A Shell Privilege Escalation vulnerability in Nokia 1830 Global Express (GX) |
| CVE-2026-40465 | NS NSP Nokia | 5.3 | Aug 31 | An Open Re-direct Vulnerability in Nokia NSP |
| CVE-2026-40464 | NS NSP Nokia | 5.4 | Aug 31 | A Stored Cross-Site Scripting (XSS) Vulnerability in Nokia NSP |
| CVE-2026-40463 | WA WaveSuite Nokia | 7.6 | Aug 31 | An Insufficient Role-based Access Control Vulnerability in WaveSuite |
| CVE-2025-7406 | MN MantaRay NM Nokia | 7.8 | Jun 30 | A Sudo Privilege Escalation Vulnerability in Nokia MantaRay NM |
| CVE-2025-24816 | MN MantaRay NM Nokia | 6.5 | Jun 30 | An Improper Access Control vulnerability in Nokia MantaRay NM |
| CVE-2025-24815 | MN MantaRay NM Nokia | 7.8 | Jun 30 | An unrestricted file upload vulnerability in Nokia MantaRay NM |
| CVE-2025-9912 | NS Nokia SR Linux Nokia | 6.3 | Jun 16 | A local privilege escalation vulnerability in Nokia SR Linux |
| CVE-2025-10262 | SL SR Linux Nokia | 6.3 | Jun 16 | An unsanitized format validation vulnerability in Nokia SR Linux |
| CVE-2022-45899 | BM Broadcast Message Center Nokia | 6.5 | May 8 | Nokia Broadcast Message Center (BMC) before 13.1 allows an unauthenticated remote attacker to do OS command injection as root via shell metacharacters in the Log Scanner Search… |
| CVE-2025-24819 | MN MantaRay NM Nokia | 5.7 | Apr 7 | A Relative Path Traversal vulnerability in Nokia MantaRay NM |
| CVE-2025-24818 | MN MantaRay NM Nokia | 8.0 | Apr 7 | An OS Command Injection vulnerability in Nokia MantaRay NM |
| CVE-2025-24817 | MN MantaRay NM Nokia | 8.0 | Apr 7 | An OS Command Injection vulnerability in Nokia MantaRay NM |
| CVE-2021-35486 | IM Impact Mobile Nokia | 8.1 | Mar 3 | A Cross-Site Request Forgery (CSRF) vulnerability in Nokia IMPACT through 19.11.2.10-20210118042150283 allows a remote attacker to import and overwrite the entire application… |
| CVE-2021-35483 | IM Impact Nokia | 4.1 | Mar 3 | The Applications component of Nokia IMPACT version through 19.11.2.10-20210118042150283 allows an authenticated user to arbitrarily upload JavaScript files via the… |
| CVE-2021-35484 | IM Impact Nokia | 8.2 | Mar 3 | Nokia IMPACT through 19.11.2.10-20210118042150283 allows an authenticated user to perform a Time-based Boolean Blind SQL Injection attack on the endpoint… |
| CVE-2021-35485 | IM Impact Nokia | 8.0 | Mar 3 | The Applications component of Nokia IMPACT version through 19.11.2.10-20210118042150283 allows an authenticated user to arbitrarily upload server-side executable files via the… |
| CVE-2023-31044 | IM Impact Mobile Nokia | 8.8 | Mar 3 | An issue was discovered in Nokia Impact before Mobile 23_FP1 |
| CVE-2025-10258 | ID Infinera Dna Nokia | 6.3 | Feb 5 | Infinera DNA is vulnerable to a time-based SQL injection vulnerability due to insufficient input validation, which may result in leaking of sensitive information |
| CVE-2025-27020 | IM Infinera Mtc-9 Firmware Nokia | 9.8 | Dec 8 | Improper configuration of the SSH service in Infinera MTC-9 allows an unauthenticated attacker to execute arbitrary commands and access data on file system |
| CVE-2025-27019 | IM Infinera Mtc-9 Firmware Nokia | 9.8 | Dec 8 | Remote shell service (RSH) in Infinera MTC-9 version R22.1.1.0275 allows an attacker to utilize password-less user accounts and obtain system access by activating a reverse… |
| CVE-2025-26489 | IM Infinera Mtc-9 Firmware Nokia | 6.5 | Dec 8 | Improper input validation in the Netconf service in Infinera MTC-9 allows remote authenticated users to crash the service and reboot the appliance, thus causing a DoS condition,… |
| CVE-2025-26488 | IM Infinera Mtc-9 Firmware Nokia | 7.5 | Dec 8 | Improper Input Validation vulnerability in Infinera MTC-9 allows remote unauthenticated users to crash the service and cause a reboot of the appliance, thus causing a DoS… |
| CVE-2025-26487 | IM Infinera Mtc-9 Firmware Nokia | 8.6 | Dec 8 | Server-Side Request Forgery (SSRF) vulnerability in Infinera MTC-9 version allows remote unauthenticated users to gain access to other network resources using HTTPS requests… |
| CVE-2025-24938 | WN Wavesuite Noc Nokia | 8.4 | Jul 21 | The web application allows user input to pass unfiltered to a command executed on the underlying operating system |
| CVE-2025-24937 | WN Wavesuite Noc Nokia | 9.0 | Jul 21 | File contents could be read from the local file system by an attacker |
| CVE-2025-24936 | WN Wavesuite Noc Nokia | 9.0 | Jul 21 | The web application allows user input to pass unfiltered to a command executed on the underlying operating system |
| CVE-2025-27026 | GF G42 Firmware Nokia | 4.9 | Jul 2 | A missing double-check feature in the WebGUI for CLI deactivation in Infinera G42 version R6.1.3 allows an authenticated administrator to make other management interfaces… |
| CVE-2025-27024 | GF G42 Firmware Nokia | 6.5 | Jul 2 | Unrestricted access to OS file system in SFTP service in Infinera G42 version R6.1.3 allows remote authenticated users to read/write OS files via SFTP connections |
| CVE-2025-27023 | GF G42 Firmware Nokia | 6.5 | Jul 2 | Lack or insufficent input validation in WebGUI CLI web in Infinera G42 version R6.1.3 allows remote authenticated users to read all OS files via crafted CLI commands |
| CVE-2025-27022 | GF G42 Firmware Nokia | 6.5 | Jul 2 | A path traversal vulnerability of the WebGUI HTTP endpoint in Infinera G42 version R6.1.3 allows remote authenticated users to download all OS files via HTTP requests |
| CVE-2025-27021 | GF G42 Firmware Nokia | 7.8 | Jul 2 | The misconfiguration in the sudoers configuration of the operating system in Infinera G42 version R6.1.3 allows low privileged OS users to read/write physical memory via devmem… |
| CVE-2024-25660 | TN Transcend Network Management System Nokia | 9.0 | Oct 1 | The WebDAV service in Infinera TNMS (Transcend Network Management System) 19.10.3 allows a low-privileged remote attacker to conduct unauthorized file operations, because of… |
| CVE-2024-25659 | TN Transcend Network Management System Nokia | 7.2 | Oct 1 | In Infinera TNMS (Transcend Network Management System) 19.10.3, an insecure default configuration of the internal SFTP server on Linux servers allows remote attacker to access… |
| CVE-2024-25661 | TN Transcend Network Management System Nokia | 7.7 | Oct 1 | In Infinera TNMS (Transcend Network Management System) 19.10.3, cleartext storage of sensitive information in memory of the desktop application TNMS Client allows guest OS… |
| CVE-2024-25658 | TN Transcend Network Management System Nokia | 6.5 | Oct 1 | Cleartext storage of passwords in Infinera TNMS (Transcend Network Management System) Server 19.10.3 allows attackers (with access to the database or exported configuration files)… |
| CVE-2024-28808 | H7 Hit 7300 Firmware Nokia | 2.7 | Sep 30 | An issue was discovered in Infinera hiT 7300 5.60.50 |
| CVE-2024-28807 | H7 Hit 7300 Firmware Nokia | 6.5 | Sep 30 | An issue was discovered in Infinera hiT 7300 5.60.50 |
| CVE-2024-28813 | H7 Hit 7300 Firmware Nokia | 8.4 | Sep 30 | An issue was discovered in Infinera hiT 7300 5.60.50 |
| CVE-2024-28812 | H7 Hit 7300 Firmware Nokia | 8.8 | Sep 30 | An issue was discovered in Infinera hiT 7300 5.60.50 |
| CVE-2024-28811 | H7 Hit 7300 Firmware Nokia | 3.3 | Sep 30 | An issue was discovered in Infinera hiT 7300 5.60.50 |
| CVE-2024-28810 | H7 Hit 7300 Firmware Nokia | 6.6 | Sep 30 | An issue was discovered in Infinera hiT 7300 5.60.50 |
| CVE-2024-28809 | H7 Hit 7300 Firmware Nokia | 8.8 | Sep 30 | An issue was discovered in Infinera hiT 7300 5.60.50 |
| CVE-2022-43675 | NF Network Functions Manager For Transport Nokia | 6.1 | Dec 25 | An issue was discovered in NOKIA NFM-T R19.9 |
| CVE-2022-41762 | NF Network Functions Manager For Transport Nokia | 6.1 | Dec 25 | An issue was discovered in NOKIA NFM-T R19.9 |
| CVE-2022-41761 | NF Network Functions Manager For Transport Nokia | 6.5 | Dec 25 | An issue was discovered in NOKIA NFM-T R19.9 |
| CVE-2022-41760 | NF Network Functions Manager For Transport Nokia | 6.5 | Dec 25 | An issue was discovered in NOKIA NFM-T R19.9 |
| CVE-2022-39822 | NF Network Functions Manager For Transport Nokia | 8.8 | Dec 25 | In NOKIA NFM-T R19.9, a SQL Injection vulnerability occurs in /cgi-bin/R19.9/easy1350.pl of the VM Manager WebUI via the id or host HTTP GET parameter |
| CVE-2022-39820 | NF Network Functions Manager For Transport Nokia | 6.5 | Dec 25 | In Network Element Manager in NOKIA NFM-T R19.9, an Unprotected Storage of Credentials vulnerability occurs under /root/RestUploadManager.xml.DRC and… |
| CVE-2022-39818 | NF Network Functions Manager For Transport Nokia | 8.8 | Dec 25 | In NOKIA NFM-T R19.9, an OS Command Injection vulnerability occurs in /cgi-bin/R19.9/log.pl of the VM Manager WebUI via the cmd HTTP GET parameter |
| CVE-2023-41355 | GF G-040w-q Firmware Nokia | 9.8 | Nov 3 | Chunghwa Telecom NOKIA G-040W-Q Firewall function has a vulnerability of input validation for ICMP redirect messages |
| CVE-2023-41354 | GF G-040w-q Firmware Nokia | 5.3 | Nov 3 | Chunghwa Telecom NOKIA G-040W-Q Firewall function does not block ICMP TIMESTAMP requests by default, an unauthenticated remote attacker can exploit this vulnerability by sending a… |
| CVE-2023-41353 | GF G-040w-q Firmware Nokia | 8.8 | Nov 3 | Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of weak password requirements |
| CVE-2023-41352 | GF G-040w-q Firmware Nokia | 7.2 | Nov 3 | Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of insufficient filtering for user input |
| CVE-2023-41351 | GF G-040w-q Firmware Nokia | 9.8 | Nov 3 | Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of authentication bypass, which allows an unauthenticated remote attacker to bypass the authentication mechanism to log in to… |
| CVE-2023-41350 | GF G-040w-q Firmware Nokia | 9.8 | Nov 3 | Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of insufficient measures to prevent multiple failed authentication attempts |
| CVE-2023-22618 | WM Wavelite Metro 200 NE And F2b Fans Firmware Nokia | 7.8 | Oct 4 | If Security Hardening guide rules are not followed, then Nokia WaveLite products allow a local user to create new users with administrative privileges by manipulating a web… |
| CVE-2022-41763 | AM Access Management System Nokia | 8.8 | Sep 5 | An issue was discovered in NOKIA AMS 9.7.05 |
| CVE-2023-41376 | SR Service Router Linux Nokia | 7.5 | Aug 29 | Nokia Service Router Operating System (SR OS) 22.10 and SR Linux, when error-handling update-fault-tolerance is not enabled, mishandle BGP path attributes |
