CNNVD-202507-120 Information

CNNVD ID

CNNVD-202507-120

CVE-2025-24329

  • CNNVD Published: 2025-07-02

Description (Chinese)

Nokia Single RAN是芬兰诺基亚(Nokia)公司的一个无线网络技术。 Nokia Single RAN 24R1-SR 1.0 MP之前版本存在安全漏洞,该漏洞源于对MNO内部RAN管理网络中SOAP provision操作消息的archive字段处理不当,容易受到路径遍历攻击。

Description (English)

Nokia Single RAN is a wireless network technology for Nokia in Finland. Nokia Single Ran 24R1-SR 1.0 MP had a security loophole, which stemmed from the inappropriate handling of the ARchive field of the SOAP program operating message in the MNO internal RAN management network and was vulnerable to routing attacks.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

Nomysoft Informatics

Published

2025-07-02

Last Modified

2026-02-24

References

https://www.nokia.com/about-us/security-and-privacy/product-security-advisory/cve-2025-24329/

Patch

https://www.nokia.com/about-us/security-and-privacy/product-security-advisory/cve-2025-24328/

Share on: