CVE-2025-9912— A local privilege escalation vulnerability in Nokia SR Linux
Possible ATT&CK Techniques 1AI
T1068 · Exploitation for Privilege EscalationAffected Version Matrix 6
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Nokia | Nokia SR Linux | < 23.10.8 | affected |
< 24.10.6 | affected | ||
< 25.7.2 | affected | ||
23.10.8 | unaffected | ||
24.10.6 | unaffected | ||
25.7.2 | unaffected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2025-9912
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
A local privilege escalation vulnerability in Nokia SR Linux
Source: NVD (National Vulnerability Database)
Vulnerability Description
Nokia SR Linux is vulnerable to a local privilege escalation vulnerability. Successful exploitation of this vulnerability may allow an authenticated user to execute arbitrary commands with superuser privilege.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Nokia SR Linux 权限许可和访问控制问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Nokia SR Linux是芬兰Nokia公司的一个网络操作系统。 Nokia SR Linux 23.10.8之前版本、24.10.6之前版本和25.7.2之前版本存在权限许可和访问控制问题漏洞，该漏洞源于权限许可和访问控制问题，可能导致授权用户以超级用户权限执行任意命令。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Nokia | Nokia SR Linux | < 23.10.8 | - | |
| Nokia | Nokia SR Linux | 23.10.8 | - |
II. Public POCs for CVE-2025-9912
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-9912
请登录查看更多情报信息。
Vendor Advisories for CVE-2025-9912 (1)
IV. Related Vulnerabilities
Same vendor: Nokia
- CVE-2025-7406
A Sudo Privilege Escalation Vulnerability in Nokia MantaRay - CVE-2025-24816
An Improper Access Control vulnerability in Nokia MantaRay N - CVE-2025-24815
An unrestricted file upload vulnerability in Nokia MantaRay - CVE-2025-10262
An unsanitized format validation vulnerability in Nokia SR L - CVE-2025-24819
A Relative Path Traversal vulnerability in Nokia MantaRay NM
V. Comments for CVE-2025-9912
No comments yet