CVE-2025-24334: Nokia Single Ran

Low severity, CVSS 3.3. EPSS: 0.1% chance of exploitation in the next 30 days.

The Nokia Single RAN baseband software earlier than 23R2-SR 1.0 MP can be made to reveal the exact software release version by sending a specific HTTP POST request through the Mobile Network Operator (MNO) internal RAN management network.

Affected products

Published 2025-07-02. Last modified 2026-06-17.