CVE-2025-0980 — JSON RPC authentication bypass in Nokia SR Linux

CVE-2025-0980

JSON RPC authentication bypass in Nokia SR Linux PUBLISHED

Description (CNA)

Nokia SR Linux is vulnerable to an authentication vulnerability allowing unauthorized access to the JSON-RPC service. When exploited, an invalid validation allows JSON RPC access without providing valid authentication credentials.

Affected (CNA)

Vendor / product	Versions
Nokia / SR Linux	affected <23.10.6; affected <24.10.2; unaffected 23.10.6 and onwards; unaffected 24.10.2 and onwards

CWE

No CWE identifiers supplied.

References

https://www.nokia.com/we-are-nokia/security/product-security-advisory/CVE-2025-0980/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.