An issue was discovered on NOKIA Airscale ASIKA Single RAN devices before 21B. If/when CSP (as a BTS administrator) removes security hardenings from the Nokia Single RAN BTS baseband unit, the BTS baseband unit diagnostic tool AaShell (which is by default disabled) allows unauthenticated access from the mobile network solution internal BTS management network to the BTS embedded Linux operating-system level.
History

Thu, 12 Dec 2024 19:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-346
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2023-06-16T00:00:00

Updated: 2024-12-12T18:50:04.914Z

Reserved: 2023-02-04T00:00:00

Link: CVE-2023-25188

cve-icon Vulnrichment

Updated: 2024-08-02T11:18:36.251Z

cve-icon NVD

Status : Modified

Published: 2023-06-16T19:15:14.477

Modified: 2024-12-12T19:15:07.413

Link: CVE-2023-25188

cve-icon Redhat

No data.