Nokia Asika Airscale Firmware vulnerabilities

4 CVEs affecting Nokia Asika Airscale Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-25187, published 2023-06-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-25187, published 2023-06-16. High severity, CVSS 7.0. EPSS: 1% chance of exploitation in the next 30 days. An issue was discovered on NOKIA Airscale ASIKA Single RAN devices before 21B. Nokia Single RAN commissioning procedures do not change (factory-time installed) default SSH public/private key values…
CVE-2023-25186, published 2023-06-16. Low severity, CVSS 2.8. EPSS: 0.2% chance of exploitation in the next 30 days. An issue was discovered on NOKIA Airscale ASIKA Single RAN devices before 21B. If/when CSP (as a BTS administrator) removes security hardenings from a Nokia Single RAN BTS baseband unit, a directory…
CVE-2023-25185, published 2023-06-16. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. An issue was discovered on NOKIA Airscale ASIKA Single RAN devices before 21B. A mobile network solution internal fault was found in Nokia Single RAN software releases. Certain software processes in…
CVE-2023-25188, published 2023-06-16. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. An issue was discovered on NOKIA Airscale ASIKA Single RAN devices before 21B. If/when CSP (as a BTS administrator) removes security hardenings from the Nokia Single RAN BTS baseband unit, the BTS…