CVE-2026-34484

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-34484", "assignerOrgId": "b48c3b8f-639e-4c16-8725-497bc411dad0", "state": "PUBLISHED", "assignerShortName": "Nokia", "dateReserved": "2026-03-30T07:44:16.110Z", "datePublished": "2026-10-20T12:10:44.965Z", "dateUpdated": "2026-10-29T17:37:38.761Z"}, "containers": {"cna": {"title": "A Shell Privilege Escalation vulnerability in Nokia 1830 Global Express (GX)", "descriptions": [{"lang": "en", "value": "Nokia 1830 Global Express GX is vulnerable to a local privilege escalation vulnerability which exists in the administrative shell interface. An authenticated local attacker with restricted shell access can exploit this vulnerability to bypass local security restrictions and gain root access on the device."}], "affected": [{"vendor": "Nokia", "product": "Nokia 1830 Global Express (GX)", "versions": [{"version": "G42, GX G31, GX G32, GX G34 releases prior to GX r9.0.", "status": "affected"}, {"version": "r9.0 and later releases", "status": "unaffected"}]}], "references": [{"url": "https://www.nokia.com/we-are-nokia/security/product-security-advisory/cve-2026-34484/", "name": "Nokia Product Security Advisory"}], "providerMetadata": {"orgId": "b48c3b8f-639e-4c16-8725-497bc411dad0", "shortName": "Nokia", "dateUpdated": "2026-10-20T12:10:44.965Z"}, "x_generator": {"engine": "cveClient/1.0.15"}}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-269", "lang": "en", "description": "CWE-269 Improper Privilege Management"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.7, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-10-29T17:36:53.626365Z", "id": "CVE-2026-34484", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-29T17:37:38.761Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.7, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2026-34484", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-10-29T17:36:53.626365Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-269", "description": "CWE-269 Improper Privilege Management"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-29T17:36:46.546Z"}}], "cna": {"title": "A Shell Privilege Escalation vulnerability in Nokia 1830 Global Express (GX)", "affected": [{"vendor": "Nokia", "product": "Nokia 1830 Global Express (GX)", "versions": [{"status": "affected", "version": "G42, GX G31, GX G32, GX G34 releases prior to GX r9.0."}, {"status": "unaffected", "version": "r9.0 and later releases"}]}], "references": [{"url": "https://www.nokia.com/we-are-nokia/security/product-security-advisory/cve-2026-34484/", "name": "Nokia Product Security Advisory"}], "x_generator": {"engine": "cveClient/1.0.15"}, "descriptions": [{"lang": "en", "value": "Nokia 1830 Global Express GX is vulnerable to a local privilege escalation vulnerability which exists in the administrative shell interface. An authenticated local attacker with restricted shell access can exploit this vulnerability to bypass local security restrictions and gain root access on the device."}], "providerMetadata": {"orgId": "b48c3b8f-639e-4c16-8725-497bc411dad0", "shortName": "Nokia", "dateUpdated": "2026-10-20T12:10:44.965Z"}}}, "cveMetadata": {"cveId": "CVE-2026-34484", "state": "PUBLISHED", "dateUpdated": "2026-10-29T17:37:38.761Z", "dateReserved": "2026-03-30T07:44:16.110Z", "assignerOrgId": "b48c3b8f-639e-4c16-8725-497bc411dad0", "datePublished": "2026-10-20T12:10:44.965Z", "assignerShortName": "Nokia"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "Nokia 1830 Global Express (GX)", "vendor": "Nokia", "versions": [{"status": "affected", "version": "G42, GX G31, GX G32, GX G34 releases prior to GX r9.0."}, {"status": "unaffected", "version": "r9.0 and later releases"}]}], "source": "b48c3b8f-639e-4c16-8725-497bc411dad0"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Nokia 1830 Global Express GX is vulnerable to a local privilege escalation vulnerability which exists in the administrative shell interface. An authenticated local attacker with restricted shell access can exploit this vulnerability to bypass local security restrictions and gain root access on the device."}], "id": "CVE-2026-34484", "lastModified": "2026-10-29T18:17:31.160", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 0.8, "impactScore": 5.9, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-34484", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-10-29T17:36:53.626365Z", "version": "2.0.3"}}]}, "published": "2026-10-20T13:16:43.570", "references": [{"source": "b48c3b8f-639e-4c16-8725-497bc411dad0", "url": "https://www.nokia.com/we-are-nokia/security/product-security-advisory/cve-2026-34484/"}], "sourceIdentifier": "b48c3b8f-639e-4c16-8725-497bc411dad0", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-269"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "G42, GX G31, GX G32, GX G34 releases prior to GX r9.0."}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "r9.0 and later releases"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "Nokia 1830 Global Express (GX)", "source": "cna", "vendor": "Nokia"}, "product": "nokia_1830_global_express_(gx)", "vendor": "nokia"}], "created": "2026-10-20T15:15:14.424425+00:00", "updated": "2026-10-29T21:30:15.957524+00:00", "vendors": ["nokia", "nokia$PRODUCT$nokia_1830_global_express_(gx)"]}