A critical CSRF vulnerability in the Nokia IMPACT platform allows unauthorized remote attackers to overwrite core system configurations, posing a significant risk to platform integrity.

This is a Cross-Site Request Forgery vulnerability located in the /ui/rest-proxy/entity/import endpoint. The application fails to validate the X-CSRF-NONCE HTTP header or the corresponding CSRF-NONCE cookie, allowing an unauthenticated attacker to trigger configuration changes.

The ability for an attacker to overwrite the entire application configuration can lead to total loss of system control, unauthorized service disruption, or the redirection of IoT traffic. Given the CVSS score of 8.1, this vulnerability represents a high risk to business operations, as it could facilitate large-scale compromise of connected devices managed by the IMPACT platform.

Immediate Action: Contact your Nokia support representative to obtain the necessary security patch or configuration update for the IMPACT platform.

Proactive Monitoring: Review web access logs for unusual POST requests directed at the /ui/rest-proxy/entity/import endpoint, particularly those originating from external or untrusted sources.

Compensating Controls: Implement strict network segmentation and ensure that administrative interfaces for the IMPACT platform are not accessible from the public internet to mitigate the risk of CSRF exploitation.

Public Exploit Available: Yes, a technical write-up published by the Gruppo TIM Red Team provides the specific mechanism for exploiting this flaw.

Organizations utilizing the Nokia IMPACT platform must prioritize the identification and patching of affected instances. Given the high severity and the potential for complete configuration takeover, administrators should verify their versioning against the affected release and apply the vendor-provided remediation immediately to secure the platform against unauthorized modification.