{"api_version":"1","generated_at":"2026-10-30T20:07:08+00:00","cve":"CVE-2026-34484","urls":{"html":"https://cve.report/CVE-2026-34484","api":"https://cve.report/api/cve/CVE-2026-34484.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2026-34484","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-34484"},"summary":{"title":"A Shell Privilege Escalation vulnerability in Nokia 1830 Global Express (GX)","description":"Nokia 1830 Global Express GX is vulnerable to a local privilege escalation vulnerability which exists in the administrative shell interface. An authenticated local attacker with restricted shell access can exploit this vulnerability to bypass local security restrictions and gain root access on the device.","state":"PUBLISHED","assigner":"Nokia","published_at":"2026-10-20 13:16:43","updated_at":"2026-10-29 18:17:31"},"problem_types":["CWE-269","CWE-269 CWE-269 Improper Privilege Management"],"metrics":[{"version":"3.1","source":"ADP","type":"DECLARED","score":"6.7","severity":"MEDIUM","vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","data":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":6.7,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","version":"3.1"}},{"version":"3.1","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","score":"6.7","severity":"MEDIUM","vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","data":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"}}],"references":[{"url":"https://www.nokia.com/we-are-nokia/security/product-security-advisory/cve-2026-34484/","name":"https://www.nokia.com/we-are-nokia/security/product-security-advisory/cve-2026-34484/","refsource":"b48c3b8f-639e-4c16-8725-497bc411dad0","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-34484","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-34484","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"Nokia","product":"Nokia 1830 Global Express (GX)","version":"affected G42, GX G31, GX G32, GX G34 releases prior to GX r9.0.","platforms":[]},{"source":"CNA","vendor":"Nokia","product":"Nokia 1830 Global Express (GX)","version":"unaffected r9.0 and later releases","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[],"vendor_comments":[],"enrichments":{"kev":null,"epss":{"cve_year":"2026","cve_id":"34484","cve":"CVE-2026-34484","epss":"0.001420000","percentile":"0.034540000","score_date":"2026-10-29","updated_at":"2026-10-30 00:05:32"},"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":6.7,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","version":"3.1"}},{"other":{"content":{"id":"CVE-2026-34484","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","timestamp":"2026-10-29T17:36:53.626365Z","version":"2.0.3"},"type":"ssvc"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-269","description":"CWE-269 Improper Privilege Management","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-10-29T17:37:38.761Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"product":"Nokia 1830 Global Express (GX)","vendor":"Nokia","versions":[{"status":"affected","version":"G42, GX G31, GX G32, GX G34 releases prior to GX r9.0."},{"status":"unaffected","version":"r9.0 and later releases"}]}],"descriptions":[{"lang":"en","value":"Nokia 1830 Global Express GX is vulnerable to a local privilege escalation vulnerability which exists in the administrative shell interface. An authenticated local attacker with restricted shell access can exploit this vulnerability to bypass local security restrictions and gain root access on the device."}],"providerMetadata":{"dateUpdated":"2026-10-20T12:10:44.965Z","orgId":"b48c3b8f-639e-4c16-8725-497bc411dad0","shortName":"Nokia"},"references":[{"name":"Nokia Product Security Advisory","url":"https://www.nokia.com/we-are-nokia/security/product-security-advisory/cve-2026-34484/"}],"title":"A Shell Privilege Escalation vulnerability in Nokia 1830 Global Express (GX)","x_generator":{"engine":"cveClient/1.0.15"}}},"cveMetadata":{"assignerOrgId":"b48c3b8f-639e-4c16-8725-497bc411dad0","assignerShortName":"Nokia","cveId":"CVE-2026-34484","datePublished":"2026-10-20T12:10:44.965Z","dateReserved":"2026-03-30T07:44:16.110Z","dateUpdated":"2026-10-29T17:37:38.761Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2026-10-20 13:16:43","lastModifiedDate":"2026-10-29 18:17:31","problem_types":["CWE-269","CWE-269 CWE-269 Improper Privilege Management"],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-10-29T17:36:53.626365Z","id":"CVE-2026-34484","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"configurations":[]},"legacy_mitre":{"record":{"CveYear":"2026","CveId":"34484","Ordinal":"1","Title":"A Shell Privilege Escalation vulnerability in Nokia 1830 Global ","CVE":"CVE-2026-34484","Year":"2026"},"notes":[{"CveYear":"2026","CveId":"34484","Ordinal":"1","NoteData":"Nokia 1830 Global Express GX is vulnerable to a local privilege escalation vulnerability which exists in the administrative shell interface. An authenticated local attacker with restricted shell access can exploit this vulnerability to bypass local security restrictions and gain root access on the device.","Type":"Description","Title":"A Shell Privilege Escalation vulnerability in Nokia 1830 Global "}]}}}