Advisories · Technology
Nokia Single RAN.
Every CVE that names Nokia Single RAN among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 2.0 Low
SOAP message input validation fault could in theory cause OAM service resource exhaustion
- Nokia Single RAN
- CWE-1287
- CVSS 3.3 Low
The Nokia Single RAN baseband reveals its software version through the MNO internal RAN management network
- Nokia Single RAN
- Information disclosure
- CVSS 6.4 Medium
Administrative user shell input validation fault
- Nokia Single RAN
- Command injection
- CVSS 6.4 Medium
Nokia Single RAN baseband OAM service extensive capabilities
- Nokia Single RAN
- Privilege escalation
- CVSS 6.4 Medium
OAM service path traversal issue caused by a crafted SOAP message PlanId field within the RAN management network
- Nokia Single RAN
- Path traversal
- CVSS 6.4 Medium
OAM service path traversal issue caused by a crafted SOAP message archive field within the RAN management network
- Nokia Single RAN
- Path traversal
- CVSS 4.2 Medium
OAM service stack overflow caused by crafted SOAP message within the MNO internal RAN management network
- Nokia Single RAN
- Memory corruption