CVE-2023-25185

LOW

NOKIA Airscale ASIKA Single RAN < 21B - Improper Privilege Management

Title source: llm
STIX 2.1

Description

An issue was discovered on NOKIA Airscale ASIKA Single RAN devices before 21B. A mobile network solution internal fault was found in Nokia Single RAN software releases. Certain software processes in the BTS internal software design have unnecessarily high privileges to BTS embedded operating system (OS) resources.

References (2)

Core 2

Scores

CVSS v3 3.8
EPSS 0.0014
EPSS Percentile 3.9%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-269 CWE-863
Status published
Products (5)
nokia/asika_airscale_firmware 19b
nokia/asika_airscale_firmware 20a
nokia/asika_airscale_firmware 20b
nokia/asika_airscale_firmware 20c
nokia/asika_airscale_firmware 21a
Published Jun 16, 2023
Tracked Since Feb 18, 2026