The vulnerability resides in the administrative shell interface of the Nokia 1830 Global Express (GX) device. An authenticated local attacker who has restricted shell access can traverse security restrictions and become a root user on the device, thereby gaining unchecked control over the system. This results in total compromise of the device’s confidentiality, integrity, and availability, as the attacker can modify system files, install malware, or disrupt network services. The weakness corresponds to improper privilege management (CWE‑269).

The affected system is the Nokia 1830 Global Express (GX) telecommunications platform. No specific version information is provided in the advisory, so any firmware version of this product should be considered vulnerable until an official update is released.

The advisory indicates a local, authenticated attack vector with a CVSS score of 6.7. EPSS score is < 1% and the vulnerability is not listed in CISA KEV. Because the vulnerability permits an attacker already present in the device’s shell environment to gain root privileges, the potential impact is severe. However, the lack of exploitation data means the likelihood of real‑world attacks is currently unknown, but the risk remains high given the critical nature of root access on a network device.