A critical vulnerability in the Nokia IMPACT platform allows authenticated users to achieve remote code execution through unauthorized file uploads.

This vulnerability involves an insecure file upload mechanism within the Applications component, specifically via the /ui/rest-proxy/application endpoint. An attacker with authenticated access can upload arbitrary executable files, which may lead to full system compromise.

Successful exploitation of this flaw grants an attacker the ability to execute arbitrary code on the underlying server. Given the CVSS score of 8.0, this represents a high risk of total system compromise, potentially leading to unauthorized data access, service disruption, and the loss of integrity for the affected IoT platform infrastructure.

Immediate Action: Contact your Nokia support representative to obtain the necessary security patches or configuration hardening guides for the IMPACT platform.

Proactive Monitoring: Monitor server logs for suspicious POST requests directed at the /ui/rest-proxy/application endpoint, specifically looking for unexpected file extensions or anomalous upload patterns.

Compensating Controls: Implement strict network segmentation to limit access to the IMPACT management interface and deploy a Web Application Firewall (WAF) configured to block unauthorized file uploads or executable content.

Public Exploit Available: Yes, a published PoC exists, as documented in the technical write-up provided by Gruppo TIM.

Organizations utilizing the Nokia IMPACT platform must prioritize this vulnerability due to the severe impact of arbitrary code execution. Administrators should restrict access to the management console to authorized personnel only and coordinate with the vendor immediately to identify if a specific patch or configuration change is available for their environment.