CVE-2025-24328 - CVE House
Back to Database
Status published Unknown CVE-2025-24328

OAM service stack overflow caused by crafted SOAP message within the MNO internal RAN management network

Vulnerability Description

Sending a crafted SOAP "set" operation message within the Mobile Network Operator (MNO) internal Radio Access Network (RAN) management network can cause Nokia Single RAN baseband OAM service component restart with software versions earlier than release 24R1-SR 1.0 MP. This issue has been corrected to release 24R1-SR 1.0 MP and later. The OAM service component restarts automatically after the stack overflow without causing a base station restart or network service degradation, and without leaving any permanent impact on the Nokia Single RAN baseband OAM service.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-24328

Credits & Attribution

No credits recorded in the NVD database.

References

More from Nokia

View All →
CVE-2025-9974
Insufficient Input Validation on WEBUI in Nokia ONT/Beacon product
Unknown 0
CVE-2025-9912
A local privilege escalation vulnerability in Nokia SR Linux
Unknown 0
CVE-2025-7406
A Sudo Privilege Escalation Vulnerability in Nokia MantaRay NM
Unknown 0
CVE-2025-24938
Insufficient Validation of Input while user creation
Unknown 0
CVE-2025-24937
Access to local file system and its content
Unknown 0

Affected Vendor

Affected Software

Nokia Single RAN
Vulnerable Versions:
All releases prior to 24R1-SR 1.0 MP are affected.

Timeline

Official Publish: July 2nd, 2025
Last Modified: July 2nd, 2025
Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.