VYPR
← All advisories
Medium severity5.1NVD Advisory· Published Jun 16, 2023· Updated Jun 17, 2026

CVE-2023-25186

CVE-2023-25186

Description

An issue was discovered on NOKIA Airscale ASIKA Single RAN devices before 21B. If/when CSP (as a BTS administrator) removes security hardenings from a Nokia Single RAN BTS baseband unit, a directory path traversal in the Nokia BTS baseband unit diagnostic tool AaShell (which is by default disabled) provides access to the BTS baseband unit internal filesystem from the mobile network solution internal BTS management network.

Affected products

7
  • Nokia/Asika Airscale Firmware5 versions
    cpe:2.3:o:nokia:asika_airscale_firmware:19b:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:o:nokia:asika_airscale_firmware:19b:*:*:*:*:*:*:*
    • cpe:2.3:o:nokia:asika_airscale_firmware:20a:*:*:*:*:*:*:*
    • cpe:2.3:o:nokia:asika_airscale_firmware:20b:*:*:*:*:*:*:*
    • cpe:2.3:o:nokia:asika_airscale_firmware:20c:*:*:*:*:*:*:*
    • cpe:2.3:o:nokia:asika_airscale_firmware:21a:*:*:*:*:*:*:*
  • NOKIA/Airscale ASIKA Single RAN devicesdescription
  • Nokia/Airscale ASIKA Single RANllm-fuzzy
    Range: <21B

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.