CVE-2022-30903

Name of the Vulnerable Software and Affected Versions Nokia "G-2425G-A" Bharti Airtel Routers Hardware version "3FE48299DEAA" Software Version "3FE49362IJHK42"

Description The issue is related to Cross-Site Scripting (XSS) and can be exploited via the admin->Maintenance>Device Management section. This allows for potential malicious script execution.

Recommendations For Nokia "G-2425G-A" Bharti Airtel Routers Hardware version "3FE48299DEAA" Software Version "3FE49362IJHK42", consider restricting access to the admin->Maintenance>Device Management section until a fix is available. As a temporary workaround, avoid using the Device Management feature in the Maintenance section of the admin interface to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.