{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Nokia 1830 Global Express (GX)",
          "vendor": "Nokia",
          "versions": [
            {
              "status": "affected",
              "version": "G42, GX G31, GX G32, GX G34 releases prior to GX r9.0"
            },
            {
              "status": "unaffected",
              "version": "r9.0 and later releases"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Nokia 1830 Global Express (GX) is vulnerable to a CLI ACL Bypass vulnerability where a low-privileged authenticated attacker can bypass the SSH isolation mechanism and gain access to the underlying operating system shell via a custom SSH command. This issue occurs by default in the system and is not the result of misconfiguration."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-20T12:13:17.792Z",
        "orgId": "b48c3b8f-639e-4c16-8725-497bc411dad0",
        "shortName": "Nokia"
      },
      "references": [
        {
          "name": "Nokia Product Security Advisory",
          "url": "https://www.nokia.com/we-are-nokia/security/product-security-advisory/cve-2026-34485/"
        }
      ],
      "title": "A CLI ACL Bypass vulnerability in Nokia 1830 Global Express (GX)",
      "x_generator": {
        "engine": "cveClient/1.0.15"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b48c3b8f-639e-4c16-8725-497bc411dad0",
    "assignerShortName": "Nokia",
    "cveId": "CVE-2026-34485",
    "datePublished": "2026-10-20T12:13:17.792Z",
    "dateReserved": "2026-03-30T07:44:16.111Z",
    "dateUpdated": "2026-10-20T12:13:17.792Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "Nokia 1830 Global Express (GX)",
          "vendor": "Nokia",
          "versions": [
            {
              "status": "affected",
              "version": "G42, GX G31, GX G32, GX G34 releases prior to GX r9.0."
            },
            {
              "status": "unaffected",
              "version": "r9.0 and later releases"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Nokia 1830 Global Express GX is vulnerable to a local privilege escalation vulnerability which exists in the administrative shell interface. An authenticated local attacker with restricted shell access can exploit this vulnerability to bypass local security restrictions and gain root access on the device."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-20T12:10:44.965Z",
        "orgId": "b48c3b8f-639e-4c16-8725-497bc411dad0",
        "shortName": "Nokia"
      },
      "references": [
        {
          "name": "Nokia Product Security Advisory",
          "url": "https://www.nokia.com/we-are-nokia/security/product-security-advisory/cve-2026-34484/"
        }
      ],
      "title": "A Shell Privilege Escalation vulnerability in Nokia 1830 Global Express (GX)",
      "x_generator": {
        "engine": "cveClient/1.0.15"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b48c3b8f-639e-4c16-8725-497bc411dad0",
    "assignerShortName": "Nokia",
    "cveId": "CVE-2026-34484",
    "datePublished": "2026-10-20T12:10:44.965Z",
    "dateReserved": "2026-03-30T07:44:16.110Z",
    "dateUpdated": "2026-10-20T12:10:44.965Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}