Skip to content
OpenAdvisories

Vendor

Nokia

34 known vulnerabilities.

Products

Nokia Single RAN 7 MantaRay NM 6 ASIK AirScale 3 WaveSuite NOC 3 SR OS (7250 IXR, 7450 ESS, 7750 SR, 7950 IXR, VSR), 7705 SAR OS, 7210 SAS OS 2 CBIS,NCS 2 SR Linux 2 NSP 2 Nokia 1830 Global Express (GX) 2 Nokia ONT 1 Infinera DNA 1 Nokia SR Linux 1 Nokia Single RAN AirScale (Flexi Multiradio is not affected) 1 WaveSuite 1 ASIK AirScale 5G Common System Module 0
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 2.0
    CVE-2025-24335

    SOAP message input validation fault could in theory cause OAM service resource exhaustion

    Nokia Single RAN baseband software versions earlier than 24R1-SR 2.1 MP contain a SOAP message input validation flaw, which in theory could potentially be used for causing resource exhaustion in the Single RAN baseband OAM service. No practical exploit has be…

    Nokia Nokia Single RAN
  • Low 3.3
    CVE-2025-24334

    The Nokia Single RAN baseband reveals its software version through the MNO internal RAN management network

    The Nokia Single RAN baseband software earlier than 23R2-SR 1.0 MP can be made to reveal the exact software release version by sending a specific HTTP POST request through the Mobile Network Operator (MNO) internal RAN management network.

    Nokia Nokia Single RAN
  • Low 3.3
    CVE-2023-6728

    Nokia SR OS: BOF File Encryption Vulnerability

    Nokia SR OS bof.cfg file encryption is vulnerable to a brute force attack. This weakness allows an attacker in possession of the encrypted file to decrypt the bof.cfg file and obtain the BOF configuration content.

    Nokia SR OS (7250 IXR, 7450 ESS, 7750 SR, 7950 IXR, VSR), 7705 SAR OS, 7210 SAS OS