NO
Vendor
Nokia
199
CVEs
0
On KEV
2
New 30D
Products
N17.8
Nokia 1830 Global Express (GX)
Nokia
2 CVEs0 on KEV2 new
NE8.8
Netact
Nokia
12 CVEs0 on KEV0 new
1O9.8
1350 Optical Management System
Nokia
10 CVEs0 on KEV0 new
H78.8
Hit 7300 Firmware
Nokia
7 CVEs0 on KEV0 new
IM8.8
Impact
Nokia
7 CVEs0 on KEV0 new
NF8.8
Network Functions Manager For Transport
Nokia
7 CVEs0 on KEV0 new
NS6.4
Nokia Single RAN
Nokia
7 CVEs0 on KEV0 new
GF9.8
G-040w-q Firmware
Nokia
6 CVEs0 on KEV0 new
IG9.8
I-240w-q Gpon Ont Firmware
Nokia
6 CVEs0 on KEV0 new
MN8.0
MantaRay NM
Nokia
6 CVEs0 on KEV0 new
GF7.8
G42 Firmware
Nokia
5 CVEs0 on KEV0 new
IM9.8
Infinera Mtc-9 Firmware
Nokia
5 CVEs0 on KEV0 new
AF–
Affix
Nokia
4 CVEs0 on KEV0 new
AA7.8
Asika Airscale Firmware
Nokia
4 CVEs0 on KEV0 new
TN9.0
Transcend Network Management System
Nokia
4 CVEs0 on KEV0 new
6N–
6131 Nfc
Nokia
3 CVEs0 on KEV0 new
AA8.8
ASIK AirScale
Nokia
3 CVEs0 on KEV0 new
AA8.8
Asik Airscale 474021a.101 Firmware
Nokia
3 CVEs0 on KEV0 new
ED–
Electronic Documentation
Nokia
3 CVEs0 on KEV0 new
FF8.8
Fastmile Firmware
Nokia
3 CVEs0 on KEV0 new
GM–
Groupwise Mobile Server
Nokia
3 CVEs0 on KEV0 new
HE7.8
Heif
Nokia
3 CVEs0 on KEV0 new
IM–
Intellisync Mobile Suite
Nokia
3 CVEs0 on KEV0 new
IW–
Intellisync Wireless Email Express
Nokia
3 CVEs0 on KEV0 new
WN9.0
WaveSuite NOC
Nokia
3 CVEs0 on KEV0 new
AA8.8
Asik Airscale 474021a.102 Firmware
Nokia
2 CVEs0 on KEV0 new
BM6.5
Broadcast Message Center
Nokia
2 CVEs0 on KEV0 new
CB8.8
CBIS,NCS
Nokia
2 CVEs0 on KEV0 new
IM8.8
Impact Mobile
Nokia
2 CVEs0 on KEV0 new
N7–
N70
Nokia
2 CVEs0 on KEV0 new
N9–
N95
Nokia
2 CVEs0 on KEV0 new
NS5.4
NSP
Nokia
2 CVEs0 on KEV0 new
SR7.5
Service Router Operating System
Nokia
2 CVEs0 on KEV0 new
SL6.4
SR Linux
Nokia
2 CVEs0 on KEV0 new
SO7.3
SR OS (7250 IXR, 7450 ESS, 7750 SR, 7950 IXR, VSR), 7705 SAR OS, 7210 SAS OS
Nokia
2 CVEs0 on KEV0 new
SY–
Symbian
Nokia
2 CVEs0 on KEV0 new
1P6.1
1830 Photonic Service Switch-16 Firmware
Nokia
1 CVEs0 on KEV0 new
1P6.1
1830 Photonic Service Switch-32 Firmware
Nokia
1 CVEs0 on KEV0 new
1P6.1
1830 Photonic Service Switch-4 Firmware
Nokia
1 CVEs0 on KEV0 new
32–
3210
Nokia
1 CVEs0 on KEV0 new
6H–
6210 Handset
Nokia
1 CVEs0 on KEV0 new
63–
6310i
Nokia
1 CVEs0 on KEV0 new
76–
7610
Nokia
1 CVEs0 on KEV0 new
846.5
8810 4g Firmware
Nokia
1 CVEs0 on KEV0 new
95–
9500
Nokia
1 CVEs0 on KEV0 new
AM8.8
Access Management System
Nokia
1 CVEs0 on KEV0 new
AB8.8
Airframe Bmc Web Gui R18 Firmware
Nokia
1 CVEs0 on KEV0 new
BT9.8
Bts Trs Web Console
Nokia
1 CVEs0 on KEV0 new
C27.3
C200
Nokia
1 CVEs0 on KEV0 new
E7–
E75
Nokia
1 CVEs0 on KEV0 new
EF–
E75 Firmware
Nokia
1 CVEs0 on KEV0 new
F54.3
Fastmile 5g Receiver Firmware
Nokia
1 CVEs0 on KEV0 new
FA–
Firewall Appliance
Nokia
1 CVEs0 on KEV0 new
GF4.8
G-120w-f Firmware
Nokia
1 CVEs0 on KEV0 new
GF4.8
G-2425g-a Firmware
Nokia
1 CVEs0 on KEV0 new
GG–
Ggsn
Nokia
1 CVEs0 on KEV0 new
ID6.3
Infinera DNA
Nokia
1 CVEs0 on KEV0 new
IF–
Ip440 Firewall Vpn Appliance
Nokia
1 CVEs0 on KEV0 new
IP–
Ipso
Nokia
1 CVEs0 on KEV0 new
MP–
Multimedia Player
Nokia
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-34485 | N1 Nokia 1830 Global Express (GX) Nokia | 7.8 | Oct 20 | A CLI ACL Bypass vulnerability in Nokia 1830 Global Express (GX) |
| CVE-2026-34484 | N1 Nokia 1830 Global Express (GX) Nokia | 6.7 | Oct 20 | A Shell Privilege Escalation vulnerability in Nokia 1830 Global Express (GX) |
| CVE-2026-40465 | NS NSP Nokia | 5.3 | Aug 31 | An Open Re-direct Vulnerability in Nokia NSP |
| CVE-2026-40464 | NS NSP Nokia | 5.4 | Aug 31 | A Stored Cross-Site Scripting (XSS) Vulnerability in Nokia NSP |
| CVE-2026-40463 | WA WaveSuite Nokia | 7.6 | Aug 31 | An Insufficient Role-based Access Control Vulnerability in WaveSuite |
| CVE-2025-7406 | MN MantaRay NM Nokia | 7.8 | Jun 30 | A Sudo Privilege Escalation Vulnerability in Nokia MantaRay NM |
| CVE-2025-24816 | MN MantaRay NM Nokia | 6.5 | Jun 30 | An Improper Access Control vulnerability in Nokia MantaRay NM |
| CVE-2025-24815 | MN MantaRay NM Nokia | 7.8 | Jun 30 | An unrestricted file upload vulnerability in Nokia MantaRay NM |
| CVE-2025-9912 | NS Nokia SR Linux Nokia | 6.3 | Jun 16 | A local privilege escalation vulnerability in Nokia SR Linux |
| CVE-2025-10262 | SL SR Linux Nokia | 6.3 | Jun 16 | An unsanitized format validation vulnerability in Nokia SR Linux |
| CVE-2022-45899 | BM Broadcast Message Center Nokia | 6.5 | May 8 | Nokia Broadcast Message Center (BMC) before 13.1 allows an unauthenticated remote attacker to do OS command injection as root via shell metacharacters in the Log Scanner Search… |
| CVE-2025-24819 | MN MantaRay NM Nokia | 5.7 | Apr 7 | A Relative Path Traversal vulnerability in Nokia MantaRay NM |
| CVE-2025-24818 | MN MantaRay NM Nokia | 8.0 | Apr 7 | An OS Command Injection vulnerability in Nokia MantaRay NM |
| CVE-2025-24817 | MN MantaRay NM Nokia | 8.0 | Apr 7 | An OS Command Injection vulnerability in Nokia MantaRay NM |
| CVE-2021-35485 | IM Impact Nokia | 8.0 | Mar 3 | The Applications component of Nokia IMPACT version through 19.11.2.10-20210118042150283 allows an authenticated user to arbitrarily upload server-side executable files via the… |
| CVE-2021-35484 | IM Impact Nokia | 8.2 | Mar 3 | Nokia IMPACT through 19.11.2.10-20210118042150283 allows an authenticated user to perform a Time-based Boolean Blind SQL Injection attack on the endpoint… |
| CVE-2021-35483 | IM Impact Nokia | 4.1 | Mar 3 | The Applications component of Nokia IMPACT version through 19.11.2.10-20210118042150283 allows an authenticated user to arbitrarily upload JavaScript files via the… |
| CVE-2021-35486 | IM Impact Mobile Nokia | 8.1 | Mar 3 | A Cross-Site Request Forgery (CSRF) vulnerability in Nokia IMPACT through 19.11.2.10-20210118042150283 allows a remote attacker to import and overwrite the entire application… |
| CVE-2023-31044 | IM Impact Mobile Nokia | 8.8 | Mar 3 | An issue was discovered in Nokia Impact before Mobile 23_FP1 |
| CVE-2025-10258 | ID Infinera DNA Nokia | 6.3 | Feb 5 | A time-based SQL Injection vulnerability in Infinera DNA |
| CVE-2025-9974 | NO Nokia ONT Nokia | 8.0 | Feb 2 | Insufficient Input Validation on WEBUI in Nokia ONT/Beacon product |
| CVE-2025-0980 | SL SR Linux Nokia | 6.4 | Jan 7 | JSON RPC authentication bypass in Nokia SR Linux |
| CVE-2025-27020 | IM Infinera Mtc-9 Firmware Nokia | 9.8 | Dec 8 | Improper configuration of SSH service in Infinera MTC-9 |
| CVE-2025-27019 | IM Infinera Mtc-9 Firmware Nokia | 9.8 | Dec 8 | Remote shell service (RSH) in Infinera MTC-9 |
| CVE-2025-26489 | IM Infinera Mtc-9 Firmware Nokia | 6.5 | Dec 8 | Improper input validation in Netconf service in Infinera MTC-9 |
| CVE-2025-26488 | IM Infinera Mtc-9 Firmware Nokia | 7.5 | Dec 8 | Improper input validation in XML Management service in Infinera MTC-9 |
| CVE-2025-26487 | IM Infinera Mtc-9 Firmware Nokia | 8.6 | Dec 8 | Server Side Request Forgery (SSRF) in the web server of Infinera MTC-9 |
| CVE-2023-49565 | CB CBIS,NCS Nokia | 8.4 | Sep 18 | Remote Code Execution |
| CVE-2023-49564 | CB CBIS,NCS Nokia | 8.8 | Sep 18 | Authentication Bypass |
| CVE-2025-24938 | WN WaveSuite NOC Nokia | 8.4 | Jul 21 | Insufficient Validation of Input while user creation |
| CVE-2025-24937 | WN WaveSuite NOC Nokia | 9.0 | Jul 21 | Access to local file system and its content |
| CVE-2025-24936 | WN WaveSuite NOC Nokia | 9.0 | Jul 21 | Insufficient Validation of Input in the URL |
| CVE-2025-27026 | GF G42 Firmware Nokia | 4.9 | Jul 2 | Improper Access Control Granularity impacting Infinera G42 |
| CVE-2025-27024 | GF G42 Firmware Nokia | 6.5 | Jul 2 | Improper File Access in Infinera G42 |
| CVE-2025-27023 | GF G42 Firmware Nokia | 6.5 | Jul 2 | Improper Input Validation in Infinera G42 |
| CVE-2025-27022 | GF G42 Firmware Nokia | 6.5 | Jul 2 | Path Traversal Vulnerability in Infinera G42 |
| CVE-2025-27021 | GF G42 Firmware Nokia | 7.8 | Jul 2 | Operating System Misconfiguration in Infinera G42 |
| CVE-2025-24335 | NS Nokia Single RAN Nokia | 2.0 | Jul 2 | SOAP message input validation fault could in theory cause OAM service resource exhaustion |
| CVE-2025-24334 | NS Nokia Single RAN Nokia | 3.3 | Jul 2 | The Nokia Single RAN baseband reveals its software version through the MNO internal RAN management network |
| CVE-2025-24333 | NS Nokia Single RAN Nokia | 6.4 | Jul 2 | Administrative user shell input validation fault |
| CVE-2025-24332 | NS Nokia Single RAN AirScale (Flexi Multiradio is not affected) Nokia | 7.1 | Jul 2 | Authenticated admin user can connect baseband internally from one board to another without needing to re-authentication |
| CVE-2025-24331 | NS Nokia Single RAN Nokia | 6.4 | Jul 2 | Nokia Single RAN baseband OAM service extensive capabilities |
| CVE-2025-24330 | NS Nokia Single RAN Nokia | 6.4 | Jul 2 | OAM service path traversal issue caused by a crafted SOAP message PlanId field within the RAN management network |
| CVE-2025-24329 | NS Nokia Single RAN Nokia | 6.4 | Jul 2 | OAM service path traversal issue caused by a crafted SOAP message archive field within the RAN management network |
| CVE-2025-24328 | NS Nokia Single RAN Nokia | 4.2 | Jul 2 | OAM service stack overflow caused by crafted SOAP message within the MNO internal RAN management network |
| CVE-2023-6729 | SO SR OS (7250 IXR, 7450 ESS, 7750 SR, 7950 IXR, VSR), 7705 SAR OS, 7210 SAS OS Nokia | 7.3 | Oct 17 | Nokia SR OS: File Access Security Vulnerability |
| CVE-2023-6728 | SO SR OS (7250 IXR, 7450 ESS, 7750 SR, 7950 IXR, VSR), 7705 SAR OS, 7210 SAS OS Nokia | 3.3 | Oct 17 | Nokia SR OS: BOF File Encryption Vulnerability |
| CVE-2024-25661 | TN Transcend Network Management System Nokia | 7.7 | Oct 1 | In Infinera TNMS (Transcend Network Management System) 19.10.3, cleartext storage of sensitive information in memory of the desktop application TNMS Client allows guest OS… |
| CVE-2024-25658 | TN Transcend Network Management System Nokia | 6.5 | Oct 1 | Cleartext storage of passwords in Infinera TNMS (Transcend Network Management System) Server 19.10.3 allows attackers (with access to the database or exported configuration files)… |
| CVE-2024-25659 | TN Transcend Network Management System Nokia | 7.2 | Oct 1 | In Infinera TNMS (Transcend Network Management System) 19.10.3, an insecure default configuration of the internal SFTP server on Linux servers allows remote attacker to access… |
| CVE-2024-25660 | TN Transcend Network Management System Nokia | 9.0 | Oct 1 | The WebDAV service in Infinera TNMS (Transcend Network Management System) 19.10.3 allows a low-privileged remote attacker to conduct unauthorized file operations, because of… |
| CVE-2024-28807 | H7 Hit 7300 Firmware Nokia | 6.5 | Sep 30 | An issue was discovered in Infinera hiT 7300 5.60.50 |
| CVE-2024-28812 | H7 Hit 7300 Firmware Nokia | 8.8 | Sep 30 | An issue was discovered in Infinera hiT 7300 5.60.50 |
| CVE-2024-28808 | H7 Hit 7300 Firmware Nokia | 2.7 | Sep 30 | An issue was discovered in Infinera hiT 7300 5.60.50 |
| CVE-2024-28813 | H7 Hit 7300 Firmware Nokia | 8.4 | Sep 30 | An issue was discovered in Infinera hiT 7300 5.60.50 |
| CVE-2024-28810 | H7 Hit 7300 Firmware Nokia | 6.6 | Sep 30 | An issue was discovered in Infinera hiT 7300 5.60.50 |
| CVE-2024-28809 | H7 Hit 7300 Firmware Nokia | 8.8 | Sep 30 | An issue was discovered in Infinera hiT 7300 5.60.50 |
| CVE-2024-28811 | H7 Hit 7300 Firmware Nokia | 3.3 | Sep 30 | An issue was discovered in Infinera hiT 7300 5.60.50 |
| CVE-2023-38293 | C2 C200 Nokia | 7.3 | Apr 22 | Certain software builds for the Nokia C200 and Nokia C100 Android devices contain a vulnerable, pre-installed app with a package name of com.tracfone.tfstatus (versionCode='31',… |
| CVE-2022-43675 | NF Network Functions Manager For Transport Nokia | 6.1 | Dec 25 | An issue was discovered in NOKIA NFM-T R19.9 |
