CVE-2025-24334
The Nokia Single RAN baseband reveals its software version through the MNO internal RAN management network

The Nokia Single RAN baseband software earlier than 23R2-SR 1.0 MP can be made to reveal the exact software release version by sending a specific HTTP POST request through the Mobile Network Operator (MNO) internal RAN management network.

This vulnerability is not exploitable from outside the Mobile Network Operator (MNO) internal architecture, such as from mobile network user devices (UEs), roaming networks, or the Internet.

The reported software flaw in the Single RAN baseband, which reveals the software release version, can only be misused from within the MNO internal Radio Access Network (RAN) management network by sending a specific HTTP POST request to the Single RAN baseband via the RAN management network.

No practical exploit has been detected for this flaw. However, in theory, the software release version information could be used to precisely identify (i.e., fingerprint) the targeted devices, potentially leading to more targeted attack attempts.

This issue has been corrected starting from release 23R2-SR 1.0 MP and later.

The fix has been included starting from 23R2-SR 1.0 MP.

• Guillaume Teissier (P1 Security France)
• Laurent Ghigonis (P1 Security France) 
• Radu Balaci (Bell Mobility Canada)
• Meghna Patel (Bell Mobility Canada)