The vulnerability is an OS command injection flaw that permits an attacker to execute arbitrary shell commands with root privileges. The weakness originates from unsanitized input in the Log Scanner Search Pattern field, allowing shell metacharacters to be interpreted by the underlying operating system. This defect can be exploited to compromise confidentiality, integrity, and availability by gaining full control over the affected device.

Nokia Broadcast Message Center versions prior to 13.1 are impacted. Users deploying these earlier releases must verify whether they are running the vulnerable software and consider upgrading to a non‑vulnerable version.

This flaw is exploitable without any authentication. The CVSS assessment is not provided, and the EPSS score is unavailable, but the fact that the issue permits root‑level command execution indicates high severity. The vulnerability is not listed in CISA’s KEV catalog. Likely exploitation requires a network‑accessible interface to the Log Scanner feature and the input of crafted shell metacharacters.