PT-2025-27610 · Nokia · Nokia Single Ran Airscale Baseband

Guillaume Teissier + 3 · Published 2025-07-02 · Updated 2025-07-07 · CVE-2025-24332

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Nokia Single RAN AirScale baseband versions prior to 23R4-SR 3.0 MP

Description: The issue allows an authenticated administrative user to access all physical boards after a single login to the baseband system board, without re-authentication when connecting to baseband capacity boards using the internal bsoc SSH service. This service is available internally within the baseband and through the internal backplane between the boards, using an SSH private key present on the baseband system board. The bsoc SSH capability was previously considered an administrative functionality but has been restricted to be available only to baseband root-privileged administrators to mitigate the possibility of misuse with lower-level privileges.

Recommendations: For versions prior to 23R4-SR 3.0 MP, update to release 23R4-SR 3.0 MP or later to restrict the bsoc SSH capability to baseband root-privileged administrators and mitigate the issue.

Fix

Authentication Bypass Using an Alternate Path or Channel

Weakness Enumeration

CWE-288

Related Identifiers

BDU:2025-13808

CVE-2025-24332

Affected Products

Nokia Single Ran Airscale Baseband

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-24332 · Security Note
• https://bdu.fstec.ru/vul/2025-13808 · Security Note
• https://nokia.com/about-us/security-and-privacy/product-security-advisory/cve-2025-24332 · Note
• https://twitter.com/cracbot/status/1942176838064955836 · Twitter Post
• https://twitter.com/CVEnew/status/1940339415764611243 · Twitter Post