Nokia Broadcast Message Center (BMC) before 13.1 allows an unauthenticated remote attacker to do OS command injection as root via shell metacharacters in the Log Scann…

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. May 8, 2026 · NIST NVD

   Detected

   Nokia Broadcast Message Center (BMC) before 13.1 allows an unauthenticated remote attacker to do OS command injection as root via shell metacharacters in the Log Scanner Search Pattern field.

2. Aug 12, 2026 · NIST NVD

   Updated

   Nokia Broadcast Message Center (BMC) before 13.1 allows an unauthenticated remote attacker to do OS command injection as root via shell metacharacters in the Log Scanner Search Pattern field.

Affected

• cpe nokia/broadcast message centerversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2022-45899

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2022-45899

  Nokia Broadcast Message Center (BMC) before 13.1 allows an unauthenticated remote attacker to do OS command injection as root via shell metacharacters in the Log Scanner Search Pattern field.

  nvd.nist.gov

References

• Not Applicable · nokia.com
• Exploit · exploit-db.com