CVE-2023-25187 : Vulnerability Insights and Analysis

An issue was discovered on NOKIA Airscale ASIKA Single RAN devices before 21B, where default SSH public/private key values specific to a network operator are not changed during Nokia Single RAN commissioning procedures. This could potentially lead to malicious operations staff inside a CSP network attempting a MITM exploitation of BTS service user access when SSH is enabled for Nokia service personnel.

Understanding CVE-2023-25187

This CVE pertains to a security vulnerability found in NOKIA Airscale ASIKA Single RAN devices before version 21B, allowing for potential malicious exploitation within a CSP network.

What is CVE-2023-25187?

The vulnerability involves the failure to update default SSH public/private key values on Nokia Single RAN devices during commissioning, potentially enabling unauthorized access attempts by internal staff.

The Impact of CVE-2023-25187

This vulnerability could result in a malicious insider compromising BTS service user access, posing a security risk within a CSP network. While the default SSH keys do not provide entry to the BTS, the potential for exploit during SSH-enabled troubleshooting activities exists.

Technical Details of CVE-2023-25187

This section outlines specific technical aspects of the vulnerability for a better understanding.

Vulnerability Description

The issue arises from the persistence of default SSH public/private key values specific to a network operator on Nokia Airscale ASIKA Single RAN devices, potentially enabling unauthorized access attempts.

Affected Systems and Versions

The vulnerability affects NOKIA Airscale ASIKA Single RAN devices before version 21B, where default SSH key values are not updated during commissioning procedures.

Exploitation Mechanism

Malicious operations staff within a CSP network could exploit this vulnerability by attempting a MITM attack on BTS service user access when SSH is enabled for troubleshooting by Nokia service personnel.

Mitigation and Prevention

To address and prevent the exploitation of CVE-2023-25187, specific steps and security measures should be taken.

Immediate Steps to Take

It is recommended to update default SSH key values to operator-specific values during BTS deployment commissioning.
Implement strict access controls and monitoring mechanisms to detect and prevent unauthorized access attempts.

Long-Term Security Practices

Regularly review and update security configurations of network devices to mitigate potential vulnerabilities.
Provide comprehensive training to staff regarding secure commissioning procedures and key management practices.

Patching and Updates

Ensure that all NOKIA Airscale ASIKA Single RAN devices are updated to version 21B or newer to address the vulnerability. Follow manufacturer guidelines for changing default SSH keys to operator-specific values during device commissioning.