Lucene search
HistoryOct 03, 2023 - 3:15 p.m.
CVE-2023-4884
cve-2023-4884
open5gs
http request
authentication
nvd
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
7.3 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
37.2%
An attacker could send an HTTP request to an Open5GS endpoint and retrieve the information stored on the device due to the lack of Authentication.
Affected configurations
Node
open5gsopen5gsRange≤2.4.10 and prior
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Open5GS",
"vendor": "Open5GS",
"versions": [
{
"status": "affected",
"version": "2.4.10 and prior"
}
]
}
]Related
prion
prion
Authentication flaw
2023-10-03 15:15:00
nvd
nvd
CVE-2023-4884
2023-10-03 15:15:40
cvelist
cvelist
CVE-2023-4884 Multiple vulnerabilities in Open5GS
2023-10-03 14:46:57
cnvd
cnvd
Open5GS Access Control Error Vulnerability
2023-10-11 00:00:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
7.3 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
37.2%
Related for CVE-2023-4884