Vulnerability Details : CVE-2023-25187
Potential exploit
An issue was discovered on NOKIA Airscale ASIKA Single RAN devices before 21B. Nokia Single RAN commissioning procedures do not change (factory-time installed) default SSH public/private key values that are specific to a network operator. As a result, the CSP internal BTS network SSH server (disabled by default) continues to apply the default SSH public/private key values. These keys don't give access to BTS, because service user authentication is username/password-based on top of SSH. Nokia factory installed default SSH keys are meant to be changed from operator-specific values during the BTS deployment commissioning phase. However, before the 21B release, BTS commissioning manuals did not provide instructions to change default SSH keys (to BTS operator-specific values). This leads to a possibility for malicious operations staff (inside a CSP network) to attempt MITM exploitation of BTS service user access, during the moments that SSH is enabled for Nokia service personnel to perform troubleshooting activities.
Products affected by CVE-2023-25187
- cpe:2.3:o:nokia:asika_airscale_firmware:19b:*:*:*:*:*:*:*
- cpe:2.3:o:nokia:asika_airscale_firmware:20a:*:*:*:*:*:*:*
- cpe:2.3:o:nokia:asika_airscale_firmware:20b:*:*:*:*:*:*:*
- cpe:2.3:o:nokia:asika_airscale_firmware:20c:*:*:*:*:*:*:*
- cpe:2.3:o:nokia:asika_airscale_firmware:21a:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2023-25187
0.11%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 45 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2023-25187
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
6.3
|
MEDIUM | CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H |
0.3
|
5.9
|
MITRE | |
7.0
|
HIGH | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H |
1.0
|
5.9
|
NIST |
CWE ids for CVE-2023-25187
-
The product contains hard-coded credentials, such as a password or cryptographic key.Assigned by:
- 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)
- nvd@nist.gov (Primary)
References for CVE-2023-25187
-
http://packetstormsecurity.com/files/173055/Nokia-ASIKA-7.13.52-Private-Key-Disclosure.html
Nokia ASIKA 7.13.52 Private Key Disclosure ≈ Packet StormExploit;Third Party Advisory;VDB Entry
-
https://www.nokia.com/about-us/security-and-privacy/product-security-advisory/cve-2023-25187/
Access DeniedVendor Advisory
-
https://Nokia.com
Access DeniedProduct
Jump to