Privilege Escalation in Nokia Airscale ASIKA Single RAN Devices

CVE-2023-25185

Summary

A security flaw has been identified in the Nokia Airscale ASIKA Single RAN devices prior to release 21B. This vulnerability stems from internal software processes within the BTS design that operate with excessive privileges, permitting unauthorized access to BTS embedded operating system resources. The implications of such a vulnerability could lead to significant disruptions, highlighting the need for immediate attention from network operators.

References