What’s Vulnerable › Products

Nokia Single RAN vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your Nokia Single RAN version is affected

Latest Nokia Single RAN vulnerabilities

• CVE-2025-24335 — SOAP message input validation fault could in theory cause OAM service resource exhaustion (CVSS 2.0)
• CVE-2025-24334 — The Nokia Single RAN baseband reveals its software version through the MNO internal RAN management network (CVSS 3.3)
• CVE-2025-24333 — Administrative user shell input validation fault (CVSS 6.4)
• CVE-2025-24331 — Nokia Single RAN baseband OAM service extensive capabilities (CVSS 6.4)
• CVE-2025-24330 — OAM service path traversal issue caused by a crafted SOAP message PlanId field within the RAN management network (CVSS 6.4)
• CVE-2025-24329 — OAM service path traversal issue caused by a crafted SOAP message archive field within the RAN management network (CVSS 6.4)
• CVE-2025-24328 — OAM service stack overflow caused by crafted SOAP message within the MNO internal RAN management network (CVSS 4.2)