CVE-2023-25185

An issue was discovered on NOKIA Airscale ASIKA Single RAN devices before 21B. A mobile network solution internal fault was found in Nokia Single RAN software releases. Certain software processes in the BTS internal software design have unnecessarily high privileges to BTS embedded operating system (OS) resources.

CVSS v3 3.8 LOW

3.8^/10

CVSS v3 : LOW

Vector :

Exploitability : 0.3 / Impact : 3.4

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required HIGH

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://Nokia.com	Product
https://www.nokia.com/about-us/security-and-privacy/product-security-advisory/cve-2023-25185/	Vendor Advisory
https://Nokia.com	Product
https://www.nokia.com/about-us/security-and-privacy/product-security-advisory/cve-2023-25185/	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:o:nokia:asika_airscale_firmware:19b:::::::*
	cpe:2.3:o:nokia:asika_airscale_firmware:20a:::::::*
	cpe:2.3:o:nokia:asika_airscale_firmware:20b:::::::*
	cpe:2.3:o:nokia:asika_airscale_firmware:20c:::::::*
	cpe:2.3:o:nokia:asika_airscale_firmware:21a:::::::*

cpe:2.3:h:nokia:asika_airscale:-:*:*:*:*:*:*:*

History

12 Dec 2024, 22:15

Type	Values Removed	Values Added
CWE		CWE-863

Information

Published : 2023-06-16 19:15

Updated : 2024-12-12 22:15

NVD link : CVE-2023-25185

Mitre link : CVE-2023-25185

CVE.ORG link : CVE-2023-25185

JSON object : View

Products Affected

nokia

asika_airscale
asika_airscale_firmware

CWE

CWE-269

Improper Privilege Management

CWE-863

Incorrect Authorization

{"id": "CVE-2023-25185", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "cve@mitre.org", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.8, "attackVector": "LOCAL", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "LOW", "privilegesRequired": "HIGH", "confidentialityImpact": "LOW"}, "impactScore": 3.4, "exploitabilityScore": 0.3}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "published": "2023-06-16T19:15:14.360", "references": [{"url": "https://Nokia.com", "tags": ["Product"], "source": "cve@mitre.org"}, {"url": "https://www.nokia.com/about-us/security-and-privacy/product-security-advisory/cve-2023-25185/", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://Nokia.com", "tags": ["Product"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.nokia.com/about-us/security-and-privacy/product-security-advisory/cve-2023-25185/", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-269"}]}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-863"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered on NOKIA Airscale ASIKA Single RAN devices before 21B. A mobile network solution internal fault was found in Nokia Single RAN software releases. Certain software processes in the BTS internal software design have unnecessarily high privileges to BTS embedded operating system (OS) resources."}], "lastModified": "2024-12-12T22:15:06.247", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:nokia:asika_airscale_firmware:19b:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FE8E3A0E-3B21-49D8-A4EE-33FE5FBA7B51"}, {"criteria": "cpe:2.3:o:nokia:asika_airscale_firmware:20a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A612E565-7686-4C20-99AF-67B283328A42"}, {"criteria": "cpe:2.3:o:nokia:asika_airscale_firmware:20b:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5AE52024-F5EE-42F6-AC3A-702E87B1ABF2"}, {"criteria": "cpe:2.3:o:nokia:asika_airscale_firmware:20c:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DA68A71E-A8FB-4448-BE75-318E4582FC43"}, {"criteria": "cpe:2.3:o:nokia:asika_airscale_firmware:21a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B2FAA373-A46D-48A6-8A08-F66F4F3604C7"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:nokia:asika_airscale:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "61C0B724-C7EA-4214-98CF-49812292332B"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}