Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-72qq-hpxg-5292

Опубликовано: 02 июл. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 4.2

Описание

Sending a crafted SOAP "set" operation message within the Mobile Network Operator (MNO) internal Radio Access Network (RAN) management network can cause Nokia Single RAN baseband OAM service component restart with software versions earlier than release 24R1-SR 1.0 MP. This issue has been corrected to release 24R1-SR 1.0 MP and later.

The OAM service component restarts automatically after the stack overflow without causing a base station restart or network service degradation, and without leaving any permanent impact on the Nokia Single RAN baseband OAM service.

Sending a crafted SOAP "set" operation message within the Mobile Network Operator (MNO) internal Radio Access Network (RAN) management network can cause Nokia Single RAN baseband OAM service component restart with software versions earlier than release 24R1-SR 1.0 MP. This issue has been corrected to release 24R1-SR 1.0 MP and later.

The OAM service component restarts automatically after the stack overflow without causing a base station restart or network service degradation, and without leaving any permanent impact on the Nokia Single RAN baseband OAM service.

EPSS

Процентиль: 3%
0.00017
Низкий

4.2 Medium

CVSS3

Дефекты

CWE-121

Связанные уязвимости

CVSS3: 4.2
nvd
7 месяцев назад

Sending a crafted SOAP "set" operation message within the Mobile Network Operator (MNO) internal Radio Access Network (RAN) management network can cause Nokia Single RAN baseband OAM service component restart with software versions earlier than release 24R1-SR 1.0 MP. This issue has been corrected to release 24R1-SR 1.0 MP and later. The OAM service component restarts automatically after the stack overflow without causing a base station restart or network service degradation, and without leaving any permanent impact on the Nokia Single RAN baseband OAM service.

CVSS3: 4.2
fstec
7 месяцев назад

Уязвимость службы OAM платформы управления сетями Nokia Single RAN (Single Radio Access Network), позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 3%
0.00017
Низкий

4.2 Medium

CVSS3

Дефекты

CWE-121