CVE-2025-24328: OAM service stack overflow caused by crafted SOAP message within the MNO internal RAN management network

Severity: medium (CVSS 4.2 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-07-02 · updated 2026-06-17
Weakness: CWE-121

Description

Sending a crafted SOAP "set" operation message within the Mobile Network Operator (MNO) internal Radio Access Network (RAN) management network can cause Nokia Single RAN baseband OAM service component restart with software versions earlier than release 24R1-SR 1.0 MP. This issue has been corrected to release 24R1-SR 1.0 MP and later. The OAM service component restarts automatically after the stack overflow without causing a base station restart or network service degradation, and without leaving any permanent impact on the Nokia Single RAN baseband OAM service.

Affected products

Nokia Single RAN: All releases prior to 24R1-SR 1.0 MP are affected.

References

https://www.nokia.com/about-us/security-and-privacy/product-security-advisory/cve-2025-24328/

Get alerted when CVE-2025-24328 or the next vulnerability affects your stack