Skip to content
OpenAdvisories
Low · 3.3 CVE-2025-24334 EUVD-2025-19701GHSA-f8r6-7g2p-2gpv

The Nokia Single RAN baseband reveals its software version through the MNO internal RAN management network

Published Jul 2, 2025 · Updated Jul 2, 2025 · Assigned by Nokia

Description

The Nokia Single RAN baseband software earlier than 23R2-SR 1.0 MP can be made to reveal the exact software release version by sending a specific HTTP POST request through the Mobile Network Operator (MNO) internal RAN management network.

Affected products

VendorProductAffectedFixed
Nokia Nokia Single RAN All the releases prior to 23R2-SR 1.0 MP 23R2-SR 1.0 MP and later

References