CVE-2023-25188
5.1
CVSS:3.1/AC:H/AV:L/A:H/C:L/I:L/PR:H/S:U/UI:R
Summary
An issue was discovered on NOKIA Airscale ASIKA Single RAN devices before 21B. If/when CSP (as a BTS administrator) removes security hardenings from the Nokia Single RAN BTS baseband unit, the BTS baseband unit diagnostic tool AaShell (which is by default disabled) allows unauthenticated access from the mobile network solution internal BTS management network to the BTS embedded Linux operating-system level.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- https://Nokia.com
- https://www.nokia.com/about-us/security-and-privacy/product-security-advisory/cve-2023-25188/
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: partial
References
- https://Nokia.com
- https://www.nokia.com/about-us/security-and-privacy/product-security-advisory/cve-2023-25188/
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.