Approved changes feed: RSS · Atom
cpe:2.3:a:o2_uk:o2:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | O2 Uk (7578daa7-5f13-51a7-8a7a-b17d6d5cce5b) |
|---|---|
| Product | O2 (07972de0-7823-592e-86e9-e6b4e0eab782) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-48219 |
vulnerable | 2026-06-08 07:27:15.580970 |
Details available
LOW (3.5)
O2 UK before 2025-05-19 allows subscribers to determine the Cell ID of other subscribers by initiating an IMS (IP Multimedia Subsystem) call and then reading the utran-cell-id-3gpp field of a Cellular-Network-Info SIP header, aka an ECI (E-UTRAN Cell Identity) leak. The Cell ID might be usable to identify a cell location via crowdsourced data, and might correspond to a small physical area (e.g., if the called party is in a city centre). Removal of the Cellular-Network-Info header is mentioned in section 4.4.19 of ETSI TS 124 229.
Published: 2025-05-18T00:00:00.000Z
Updated: 2025-05-19T20:06:21.326Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.