Back to Database
Status published
Unknown
CVE-2025-24334
The Nokia Single RAN baseband reveals its software version through the MNO internal RAN management network
Vulnerability Description
The Nokia Single RAN baseband software earlier than 23R2-SR 1.0 MP can be made to reveal the exact software release version by sending a specific HTTP POST request through the Mobile Network Operator (MNO) internal RAN management network.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-24334
Credits & Attribution
No credits recorded in the NVD database.
References
More from Nokia
View All →CVE-2025-9974
Insufficient Input Validation on WEBUI in Nokia ONT/Beacon product
Unknown
0
CVE-2025-9912
A local privilege escalation vulnerability in Nokia SR Linux
Unknown
0
CVE-2025-7406
A Sudo Privilege Escalation Vulnerability in Nokia MantaRay NM
Unknown
0
CVE-2025-24938
Insufficient Validation of Input while user creation
Unknown
0
CVE-2025-24937
Access to local file system and its content
Unknown
0
Affected Vendor
Nokia
View all reports →Affected Software
Nokia Single RAN
Vulnerable Versions:
All the releases prior to 23R2-SR 1.0 MP, 23R2-SR 1.0 MP and later
Timeline
Official Publish:
July 2nd, 2025
Last Modified:
July 2nd, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
No vector data available
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.