VULNERABILITY INTELLIGENCE

CVE-2023-25185

CVSS score3.8 LOW
EPSS probability0.14%
CISA KEVNot currently listed
Published2023-06-16
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L

Description

An issue was discovered on NOKIA Airscale ASIKA Single RAN devices before 21B. A mobile network solution internal fault was found in Nokia Single RAN software releases. Certain software processes in the BTS internal software design have unnecessarily high privileges to BTS embedded operating system (OS) resources.

Weakness classification

  • CWE-269: Improper Privilege Management
  • CWE-863: Incorrect Authorization

Primary references