CVE-2025-48219

O2 UK before 2025-05-19 allows subscribers to determine the Cell ID of other subscribers by initiating an IMS (IP Multimedia Subsystem) call and then reading the utran-cell-id-3gpp field of a Cellular-Network-Info SIP header, aka an ECI (E-UTRAN Cell Identity) leak. The Cell ID might be usable to identify a cell location via crowdsourced data, and might correspond to a small physical area (e.g., if the called party is in a city centre). Removal of the Cellular-Network-Info header is mentioned in section 4.4.19 of ETSI TS 124 229.
Configurations

No configuration.

History

19 May 2025, 13:15

Type Values Removed Values Added
Summary
  • (es) O2 UK, hasta el 17/05/2025, permite a los suscriptores determinar el ID de celda de otros suscriptores iniciando una llamada IMS (Subsistema Multimedia IP) y leyendo el campo utran-cell-id-3gpp de una cabecera SIP Cellular-Network-Info, también conocida como fuga de ECI (Identidad de Celda E-UTRAN). El ID de celda podría utilizarse para identificar la ubicación de una celda mediante datos de colaboración abierta y podría corresponder a un área física pequeña (por ejemplo, si el receptor de la llamada se encuentra en el centro de una ciudad). La eliminación de la cabecera Cellular-Network-Info se menciona en la sección 4.4.19 de ETSI TS 124 229.
Summary (en) O2 UK through 2025-05-17 allows subscribers to determine the Cell ID of other subscribers by initiating an IMS (IP Multimedia Subsystem) call and then reading the utran-cell-id-3gpp field of a Cellular-Network-Info SIP header, aka an ECI (E-UTRAN Cell Identity) leak. The Cell ID might be usable to identify a cell location via crowdsourced data, and might correspond to a small physical area (e.g., if the called party is in a city centre). Removal of the Cellular-Network-Info header is mentioned in section 4.4.19 of ETSI TS 124 229. (en) O2 UK before 2025-05-19 allows subscribers to determine the Cell ID of other subscribers by initiating an IMS (IP Multimedia Subsystem) call and then reading the utran-cell-id-3gpp field of a Cellular-Network-Info SIP header, aka an ECI (E-UTRAN Cell Identity) leak. The Cell ID might be usable to identify a cell location via crowdsourced data, and might correspond to a small physical area (e.g., if the called party is in a city centre). Removal of the Cellular-Network-Info header is mentioned in section 4.4.19 of ETSI TS 124 229.
References
  • () https://www.ispreview.co.uk/index.php/2025/05/o2-uk-fixes-volte-flaw-that-exposed-user-mobile-location-data.html -

18 May 2025, 15:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-05-18 15:15

Updated : 2025-05-19 13:35


NVD link : CVE-2025-48219

Mitre link : CVE-2025-48219

CVE.ORG link : CVE-2025-48219


JSON object : View

Products Affected

No product.

CWE
CWE-201

Insertion of Sensitive Information Into Sent Data