CVE-2022-28864

CVE-2022-28864 is a high-severity vulnerability affecting Nokia NetAct 22, specifically within the Administration of Measurements website section. A malicious actor can inject code into the templateName parameter, leading to the download and execution of malicious files (.csv or .xlsx) on a victim's machine. With a CVSS score of 8.8, this vulnerability allows for high impact to confidentiality, integrity, and availability, requiring only low privileges and no user interaction for exploitation. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.