CVE-2023-25188: High severity nokia airscale vulnerability
An issue was discovered on NOKIA Airscale ASIKA Single RAN devices before 21B. If/when CSP (as a BTS administrator) removes security hardenings from the Nokia Single RAN BTS baseband unit, the BTS baseband unit diagnostic tool AaShell (which is by default disabled) allows unauthenticated access from the mobile network solution internal BTS management network to the BTS embedded Linux operating-system level.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-25188?
CVE-2023-25188 is a vulnerability found on NOKIA Airscale ASIKA Single RAN devices before 21B, which allows unauthenticated access to the BTS baseband unit diagnostic tool AaShell.
How severe is CVE-2023-25188?
CVE-2023-25188 has a severity rating of 7.8 (High).
Which software versions are affected by CVE-2023-25188?
CVE-2023-25188 affects NOKIA Airscale ASIKA Single RAN devices with firmware versions 19b, 20a, 20b, 20c, and 21a.
How can I fix CVE-2023-25188?
To fix CVE-2023-25188, it is recommended to update the firmware of the NOKIA Airscale ASIKA Single RAN device to version 21B or later.
Where can I find more information about CVE-2023-25188?
More information about CVE-2023-25188 can be found in the product security advisory on the Nokia website.