CVE-2023-25186

An issue was discovered on NOKIA Airscale ASIKA Single RAN devices before 21B. If/when CSP (as a BTS administrator) removes security hardenings from a Nokia Single RAN BTS baseband unit, a directory path traversal in the Nokia BTS baseband unit diagnostic tool AaShell (which is by default disabled) provides access to the BTS baseband unit internal filesystem from the mobile network solution internal BTS management network.

CVSS v3 2.8 LOW

2.8^/10

CVSS v3 : LOW

Vector :

Exploitability : 1.3 / Impact : 1.4

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://Nokia.com	Product
https://www.nokia.com/about-us/security-and-privacy/product-security-advisory/cve-2023-25186/	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:o:nokia:asika_airscale_firmware:19b:::::::*
	cpe:2.3:o:nokia:asika_airscale_firmware:20a:::::::*
	cpe:2.3:o:nokia:asika_airscale_firmware:20b:::::::*
	cpe:2.3:o:nokia:asika_airscale_firmware:20c:::::::*
	cpe:2.3:o:nokia:asika_airscale_firmware:21a:::::::*

cpe:2.3:h:nokia:asika_airscale:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2023-06-16 19:15

Updated : 2023-07-05 15:48

NVD link : CVE-2023-25186

Mitre link : CVE-2023-25186

CVE.ORG link : CVE-2023-25186

JSON object : View

Products Affected

nokia

asika_airscale
asika_airscale_firmware

CWE

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

{"id": "CVE-2023-25186", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 2.8, "attackVector": "LOCAL", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 1.3}, {"type": "Secondary", "source": "cve@mitre.org", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.1, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:H", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "LOW"}, "impactScore": 4.7, "exploitabilityScore": 0.3}]}, "published": "2023-06-16T19:15:14.423", "references": [{"url": "https://Nokia.com", "tags": ["Product"], "source": "cve@mitre.org"}, {"url": "https://www.nokia.com/about-us/security-and-privacy/product-security-advisory/cve-2023-25186/", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-22"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered on NOKIA Airscale ASIKA Single RAN devices before 21B. If/when CSP (as a BTS administrator) removes security hardenings from a Nokia Single RAN BTS baseband unit, a directory path traversal in the Nokia BTS baseband unit diagnostic tool AaShell (which is by default disabled) provides access to the BTS baseband unit internal filesystem from the mobile network solution internal BTS management network."}], "lastModified": "2023-07-05T15:48:07.843", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:nokia:asika_airscale_firmware:19b:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FE8E3A0E-3B21-49D8-A4EE-33FE5FBA7B51"}, {"criteria": "cpe:2.3:o:nokia:asika_airscale_firmware:20a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A612E565-7686-4C20-99AF-67B283328A42"}, {"criteria": "cpe:2.3:o:nokia:asika_airscale_firmware:20b:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5AE52024-F5EE-42F6-AC3A-702E87B1ABF2"}, {"criteria": "cpe:2.3:o:nokia:asika_airscale_firmware:20c:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DA68A71E-A8FB-4448-BE75-318E4582FC43"}, {"criteria": "cpe:2.3:o:nokia:asika_airscale_firmware:21a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B2FAA373-A46D-48A6-8A08-F66F4F3604C7"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:nokia:asika_airscale:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "61C0B724-C7EA-4214-98CF-49812292332B"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}