{"vulnerability": "cve-2021-31932", "sightings": [{"uuid": "b54d9a6e-309d-4e77-b7a4-de075c2c9431", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31932", "type": "seen", "source": "https://t.me/hacking_Attack/42505", "content": "Exploit Collector\nNokia Transport Module Authentication Bypass\n\nhttps://2.bp.blogspot.com/-8IZk1MGzGDs/WWlvRc2I8KI/AAAAAAAAINM/SaF41lFV3n4aBJrQBjJ2SaVGr7WaiJo3gCLcBGAs/s1600/h34.png \nThe TRS web console allows an authenticated user to remotely manage the BTS and its configuration. Analysis discovered an authentication bypass vulnerability in the web management console. BTS TRS web console version FTM_W20_FP2_2019.08.16_0010 is affected.\n\nMD5 | 4f32f0cecdf17e2dffb9e31e654386dd\n\nDownload\ntitle: Nokia Transport Module Authentication Bypass\ncase id: CM-2020-02\nproduct: BTS TRS web console (FTM_W20_FP2_2019.08.16_0010)\nvulnerability type: Authentication Bypass\nseverity: Critical\nfound: 2020-09-28\nCVE: CVE-2021-31932\nby: Cristiano Maruti (@cmaruti)\n\n[EXECUTIVE SUMMARY]\n\nThe TRS web console allows an authenticated user to remotely manage the BTS\nand its configuration. The analysis discovered an authentication bypass\nvulnerability (CWE-289) in the web management console. A malicious\nunauthenticated user can get access to all the functionalities exposed via\nthe web panel circumventing the authentication process. The vulnerability\nlies in the way the web server in use (lighttpd) protects restricted\nresources and how special characters are encoded and pass to the underline\nCGIs. A successful attack can read data from the BTS and read, modify or\ndelete BTS configuration.\n\n[VULNERABLE VERSIONS]\n\nThe following version of the TRS web console was affected by the\nvulnerability; previous versions may be vulnerable as well:\n- BTS TRS web console (FTM_W20_FP2_2019.08.16_0010)\n\n[TECHNICAL DETAILS]\n\nIt is possible to reproduce the vulnerability following these steps:\n1. Open a web browser and insert the BTS TRS web console IP\n2. Navigate to a protected resource (for example\n/protected/ShowErrorLog.cgi)\n3. Subsitute the dot character with the corresponding URL encoded value\n(%2e)\n4. Resulting URL\n(/protected/ShowErrorLog%2ecgi?token=thisIsNotTheRightToken)\ngive access without prompt for any authentication credential\n\nBelow a full transcript of the HTTP request used to get access to a\nprotected\nresource.\n\nHTTP Request\n-------------------------------------------------------------------------------\nGET /protected/ShowErrorLog%2Ecgi?token=thisIsNotTheRightToken HTTP/1.1\nHost: \nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:56.233023Z"}, {"uuid": "41444388-9eba-42f4-a4e6-bbd4e4c27d11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31932", "type": "seen", "source": "https://t.me/hacking_Attack/42505", "content": "Exploit Collector\nNokia Transport Module Authentication Bypass\n\nhttps://2.bp.blogspot.com/-8IZk1MGzGDs/WWlvRc2I8KI/AAAAAAAAINM/SaF41lFV3n4aBJrQBjJ2SaVGr7WaiJo3gCLcBGAs/s1600/h34.png \nThe TRS web console allows an authenticated user to remotely manage the BTS and its configuration. Analysis discovered an authentication bypass vulnerability in the web management console. BTS TRS web console version FTM_W20_FP2_2019.08.16_0010 is affected.\n\nMD5 | 4f32f0cecdf17e2dffb9e31e654386dd\n\nDownload\ntitle: Nokia Transport Module Authentication Bypass\ncase id: CM-2020-02\nproduct: BTS TRS web console (FTM_W20_FP2_2019.08.16_0010)\nvulnerability type: Authentication Bypass\nseverity: Critical\nfound: 2020-09-28\nCVE: CVE-2021-31932\nby: Cristiano Maruti (@cmaruti)\n\n[EXECUTIVE SUMMARY]\n\nThe TRS web console allows an authenticated user to remotely manage the BTS\nand its configuration. The analysis discovered an authentication bypass\nvulnerability (CWE-289) in the web management console. A malicious\nunauthenticated user can get access to all the functionalities exposed via\nthe web panel circumventing the authentication process. The vulnerability\nlies in the way the web server in use (lighttpd) protects restricted\nresources and how special characters are encoded and pass to the underline\nCGIs. A successful attack can read data from the BTS and read, modify or\ndelete BTS configuration.\n\n[VULNERABLE VERSIONS]\n\nThe following version of the TRS web console was affected by the\nvulnerability; previous versions may be vulnerable as well:\n- BTS TRS web console (FTM_W20_FP2_2019.08.16_0010)\n\n[TECHNICAL DETAILS]\n\nIt is possible to reproduce the vulnerability following these steps:\n1. Open a web browser and insert the BTS TRS web console IP\n2. Navigate to a protected resource (for example\n/protected/ShowErrorLog.cgi)\n3. Subsitute the dot character with the corresponding URL encoded value\n(%2e)\n4. Resulting URL\n(/protected/ShowErrorLog%2ecgi?token=thisIsNotTheRightToken)\ngive access without prompt for any authentication credential\n\nBelow a full transcript of the HTTP request used to get access to a\nprotected\nresource.\n\nHTTP Request\n-------------------------------------------------------------------------------\nGET /protected/ShowErrorLog%2Ecgi?token=thisIsNotTheRightToken HTTP/1.1\nHost: \nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:16.124175Z"}, {"uuid": "e3acdf36-e066-4f90-b8b8-a8e011a53f33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31932", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/42505", "content": "Exploit Collector\nNokia Transport Module Authentication Bypass\n\nhttps://2.bp.blogspot.com/-8IZk1MGzGDs/WWlvRc2I8KI/AAAAAAAAINM/SaF41lFV3n4aBJrQBjJ2SaVGr7WaiJo3gCLcBGAs/s1600/h34.png \nThe TRS web console allows an authenticated user to remotely manage the BTS and its configuration. Analysis discovered an authentication bypass vulnerability in the web management console. BTS TRS web console version FTM_W20_FP2_2019.08.16_0010 is affected.\n\nMD5 | 4f32f0cecdf17e2dffb9e31e654386dd\n\nDownload\ntitle: Nokia Transport Module Authentication Bypass\ncase id: CM-2020-02\nproduct: BTS TRS web console (FTM_W20_FP2_2019.08.16_0010)\nvulnerability type: Authentication Bypass\nseverity: Critical\nfound: 2020-09-28\nCVE: CVE-2021-31932\nby: Cristiano Maruti (@cmaruti)\n\n[EXECUTIVE SUMMARY]\n\nThe TRS web console allows an authenticated user to remotely manage the BTS\nand its configuration. The analysis discovered an authentication bypass\nvulnerability (CWE-289) in the web management console. A malicious\nunauthenticated user can get access to all the functionalities exposed via\nthe web panel circumventing the authentication process. The vulnerability\nlies in the way the web server in use (lighttpd) protects restricted\nresources and how special characters are encoded and pass to the underline\nCGIs. A successful attack can read data from the BTS and read, modify or\ndelete BTS configuration.\n\n[VULNERABLE VERSIONS]\n\nThe following version of the TRS web console was affected by the\nvulnerability; previous versions may be vulnerable as well:\n- BTS TRS web console (FTM_W20_FP2_2019.08.16_0010)\n\n[TECHNICAL DETAILS]\n\nIt is possible to reproduce the vulnerability following these steps:\n1. Open a web browser and insert the BTS TRS web console IP\n2. Navigate to a protected resource (for example\n/protected/ShowErrorLog.cgi)\n3. Subsitute the dot character with the corresponding URL encoded value\n(%2e)\n4. Resulting URL\n(/protected/ShowErrorLog%2ecgi?token=thisIsNotTheRightToken)\ngive access without prompt for any authentication credential\n\nBelow a full transcript of the HTTP request used to get access to a\nprotected\nresource.\n\nHTTP Request\n-------------------------------------------------------------------------------\nGET /protected/ShowErrorLog%2Ecgi?token=thisIsNotTheRightToken HTTP/1.1\nHost: \nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T10:00:07.639844Z"}, {"uuid": "73f97f25-caca-4c11-8638-813e9b9d31d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31932", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/42505", "content": "Exploit Collector\nNokia Transport Module Authentication Bypass\n\nhttps://2.bp.blogspot.com/-8IZk1MGzGDs/WWlvRc2I8KI/AAAAAAAAINM/SaF41lFV3n4aBJrQBjJ2SaVGr7WaiJo3gCLcBGAs/s1600/h34.png \nThe TRS web console allows an authenticated user to remotely manage the BTS and its configuration. Analysis discovered an authentication bypass vulnerability in the web management console. BTS TRS web console version FTM_W20_FP2_2019.08.16_0010 is affected.\n\nMD5 | 4f32f0cecdf17e2dffb9e31e654386dd\n\nDownload\ntitle: Nokia Transport Module Authentication Bypass\ncase id: CM-2020-02\nproduct: BTS TRS web console (FTM_W20_FP2_2019.08.16_0010)\nvulnerability type: Authentication Bypass\nseverity: Critical\nfound: 2020-09-28\nCVE: CVE-2021-31932\nby: Cristiano Maruti (@cmaruti)\n\n[EXECUTIVE SUMMARY]\n\nThe TRS web console allows an authenticated user to remotely manage the BTS\nand its configuration. The analysis discovered an authentication bypass\nvulnerability (CWE-289) in the web management console. A malicious\nunauthenticated user can get access to all the functionalities exposed via\nthe web panel circumventing the authentication process. The vulnerability\nlies in the way the web server in use (lighttpd) protects restricted\nresources and how special characters are encoded and pass to the underline\nCGIs. A successful attack can read data from the BTS and read, modify or\ndelete BTS configuration.\n\n[VULNERABLE VERSIONS]\n\nThe following version of the TRS web console was affected by the\nvulnerability; previous versions may be vulnerable as well:\n- BTS TRS web console (FTM_W20_FP2_2019.08.16_0010)\n\n[TECHNICAL DETAILS]\n\nIt is possible to reproduce the vulnerability following these steps:\n1. Open a web browser and insert the BTS TRS web console IP\n2. Navigate to a protected resource (for example\n/protected/ShowErrorLog.cgi)\n3. Subsitute the dot character with the corresponding URL encoded value\n(%2e)\n4. Resulting URL\n(/protected/ShowErrorLog%2ecgi?token=thisIsNotTheRightToken)\ngive access without prompt for any authentication credential\n\nBelow a full transcript of the HTTP request used to get access to a\nprotected\nresource.\n\nHTTP Request\n-------------------------------------------------------------------------------\nGET /protected/ShowErrorLog%2Ecgi?token=thisIsNotTheRightToken HTTP/1.1\nHost: \nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-07T01:00:24.410347Z"}]}