CVEvulnerability

CVE-2023-25185

7.8 HIGH Published 2023-06-16 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-06-16
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
3.8 LOW — CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-269, CWE-863

Description

An issue was discovered on NOKIA Airscale ASIKA Single RAN devices before 21B. A mobile network solution internal fault was found in Nokia Single RAN software releases. Certain software processes in the BTS internal software design have unnecessarily high privileges to BTS embedded operating system (OS) resources.

Affected configurations

• nokia asika airscale firmware 19b • nokia asika airscale firmware 20a • nokia asika airscale firmware 20b • nokia asika airscale firmware 20c • nokia asika airscale firmware 21a

Related

Weakness · CWE (2)

  • CWE-269 Improper Privilege Management weakness
  • CWE-863 Incorrect Authorization weakness

References