The unified WEBUI application of the ONT/Beacon device contains an input handling flaw that allows authenticated users to trigger unintended system-level command execution. Due to insufficient validation of user-supplied data, a low-privileged authenticated attacker may be able to execute arbitrary commands on the underlying ONT/Beacon operating system, potentially impacting the confidentiality, integrity, and availability of the device.
Metrics
Affected Vendors & Products
No data.
No data.
No data.
No data.
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Mon, 02 Feb 2026 09:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | The unified WEBUI application of the ONT/Beacon device contains an input handling flaw that allows authenticated users to trigger unintended system-level command execution. Due to insufficient validation of user-supplied data, a low-privileged authenticated attacker may be able to execute arbitrary commands on the underlying ONT/Beacon operating system, potentially impacting the confidentiality, integrity, and availability of the device. | |
| Title | Insufficient Input Validation on WEBUI in Nokia ONT/Beacon product | |
| References |
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: Nokia
Published:
Updated: 2026-02-02T09:01:31.524Z
Reserved: 2025-09-04T10:51:51.347Z
Link: CVE-2025-9974
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-02-02T09:15:54.527
Modified: 2026-02-02T09:15:54.527
Link: CVE-2025-9974
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses
No weakness.