Advisoriesby IbisNokiaCVE-2026-34485
Nokia 1830 Global Express (GX): improper access control
No fix yet
Nokia 1830 Global Express (GX) is vulnerable to a CLI ACL Bypass vulnerability where a low-privileged authenticated attacker can bypass the SSH isolation mechanism and gain access to the underlying operating system shell via a custom SSH command. This issue occurs by default in the system and is not the result of misconfiguration.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| Nokia 1830 Global Express (GX) Product | <= G42, GX G31, GX G32, GX G34 releases prior to GX r9.0 | No fix yet |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Severity from
- CISA (its enrichment of the CVE record)
- Weakness
- CWE-284