CVE-2025-24330 OAM service path traversal issue caused by a crafted SOAP message PlanId field within the RAN management network

Sending a crafted SOAP "provision" operation message PlanId field within the Mobile Network Operator MNO internal Radio Access Network RAN management network can cause path traversal issue in Nokia Single RAN baseband software with versions earlier than release 24R1-SR 1.0 MP. This issue has been...

CVE-2025-24328

CVE-2025-24328 affects Nokia Single RAN baseband OAM service component; a crafted SOAP "set" operation in the MNO internal RAN management network can trigger a stack overflow, causing the OAM service component to restart on software versions earlier than 24R1-SR 1.0 MP. The issue has been fixed i...

CVE-2005-2224

The CVE-2005-2224 entry concerns Microsoft ASP.NET web services, where aspnet_wp.exe is affected by processing crafted SOAP messages sent to an RPC/Encoded method, leading to denial of service via CPU consumption from an infinite loop. The available connected documents confirm the affected compon...