CVE-2025-24334
Low
Description
The Nokia Single RAN baseband software earlier than 23R2-SR 1.0 MP can be made to reveal the exact software release version by sending a specific HTTP POST request through the Mobile Network Operator (MNO) internal RAN management network.
SeverityLow
CVSS3.3
Exploit probability—
ProductNokia Single RAN
PublishedJul 2, 2025
First seenJul 2, 2025
Weakness typeCWE-497CWE-497
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Nokia Nokia Single RAN | All the releases prior to 23R2-SR 1.0 MP | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.