CVE-2025-24334

creationtimestamp| type| source ---|---|--- 2025-07-02 12:47:34+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114783712216991743 2025-07-02 13:10:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsybygumcc2a...

CVE-2025-24334 The Nokia Single RAN baseband reveals its software version through the MNO internal RAN management network

The Nokia Single RAN baseband software earlier than 23R2-SR 1.0 MP can be made to reveal the exact software release version by sending a specific HTTP POST request through the Mobile Network Operator MNO internal RAN management network...

CVE-2025-24334

The Nokia Single RAN baseband software versions prior to 23R2-SR 1.0 MP are vulnerable to information disclosure. Due to a failure to restrict specific HTTP POST requests sent over the Mobile Network Operator (MNO) internal RAN management network , an attacker can reveal the exact software releas...