Service Router Operating System vulnerabilities

2 known vulnerabilities in Service Router Operating System from Nokia. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  SR OS (7250 IXR, 7450 ESS, 7750 SR, 7950 IXR…: Incorrect Permission Assignment for Critical Resource

  CVE-2023-6729Oct 17, 2024Nokia

  Nokia SR OS routers allow read-write access to the entire file system via SFTP or SCP for users configured with "access console." Consequently, a low privilege authenticated user with "access console" can read or replace the router configuration file as well a

• 7.5 High severity

  Service Router Linux: Always-Incorrect Control Flow Implementation

  CVE-2023-41376Aug 29, 2023Nokia

  Nokia Service Router Operating System (SR OS) 22.10 and SR Linux, when error-handling update-fault-tolerance is not enabled, mishandle BGP path attributes.