504 matches found
Microsoft Intune: 5 endpoint management predictions for 2023
The end of the year typically brings with it a small library of reports with predictions for the year ahead. The value in these reports is less in the precise predictions themselves—given how interconnected the world is, no one has a perfect crystal ball. Rather, the forecasts help frame the...
Microsoft Intune: 5 endpoint management predictions for 2023
The end of the year typically brings with it a small library of reports with predictions for the year ahead. The value in these reports is less in the precise predictions themselves—given how interconnected the world is, no one has a perfect crystal ball. Rather, the forecasts help frame the...
NSA, CISA, and ODNI Release Guidance on Potential Threats to 5G Network Slicing
Today, the National Security Agency NSA, CISA, and the Office of the Director of National Intelligence ODNI, published Potential Threats to 5G Network Slicing. This guidance—created by the Enduring Security Framework ESF, a public-private cross-sector working group led by the NSA and CISA—present...
How can we Prevent an Internet of Compromised Things?
The shape of things to come An increasing array of physical household and business objects now come with a plethora of sensors, software, and processing abilities, connecting to like-minded devices and swapping data with additional systems via the internet or across networks. These objects and...
Open5GS Denial of Service Vulnerability (CNVD-2023-08774)
Open5GS is a C open source implementation of 5G Core and Epc, the core network of the Lte/Nr network. version v2.4.11 of Open5GS suffers from a denial of service vulnerability that stems from the failure or inability to free dynamically allocated heap memory in src/smf/pfcp-path.c. An attacker...
free5GC Denial of Service Vulnerability
free5GC is a 5th Generation 5G mobile core network open source project by free5GC. free5GC version 3.2.1 suffers from a denial of service vulnerability. The vulnerability stems from the program's failure to properly come out with the wrong NGAP message, which is exploited by attackers to crash th...
TOTOLINK NR1800X setOpModeCfg buffer overflow vulnerability
TOTOLINK NR1800X is an excellent 5G NR indoor Wi-Fi and SIP CPE from China Gion Electronics TOTOLINK.Designed to provide fast and convenient deployment of NR fixed data services for homes and offices.TOTOLINK NR1800X V9.1.0u.6279B20210910 version is vulnerable to a buffer overflow vulnerability,...
TOTOLINK NR1800X setLanguageCfg Method Buffer Overflow Vulnerability
TOTOLINK NR1800X is an outstanding 5G NR indoor Wi-Fi and SIP CPE from China's TOTOLINK. designed to provide fast and easy deployment of NR fixed data services in homes and offices. A buffer overflow vulnerability exists in TOTOLINK NR1800X version V9.1.0u.6279B20210910, which stems from the lack...
TOTOLINK NR1800X setIpPortFilterRules method buffer overflow vulnerability
TOTOLINK NR1800X is an outstanding 5G NR indoor Wi-Fi and SIP CPE from China's TOTOLINK. designed to provide fast and easy deployment of NR fixed data services in homes and offices. A buffer overflow vulnerability exists in TOTOLINK NR1800X version V9.1.0u.6279B20210910, which stems from a lack o...
TOTOLINK NR1800X UploadCustomModule Buffer Overflow Vulnerability
TOTOLINK NR1800X is an outstanding 5G NR indoor Wi-Fi and SIP CPE from China-based Gion Electronics TOTOLINK, designed to provide fast and easy deployment of NR fixed data services for homes and offices.A buffer overflow vulnerability exists in TOTOLINK NR1800X V9.1.0u.6279B20210910 version, whic...
Open5GS Denial of Service Vulnerability
Open5GS is an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. A denial of service vulnerability exists in Open5GS 2.4.10 and earlier, and 2.4.10 and later, which stems from a failure to properly handle incoming error messages in the component AMF's...
CVE-2022-38788
An issue was discovered in Nokia FastMile 5G Receiver 5G14-B 1.2104.00.0281. Bluetooth on the Nokia ODU uses outdated pairing mechanisms, allowing an attacker to passively intercept a paring handshake and after offline cracking retrieve the PIN and LTK long-term key...
CVE-2022-38788
CVE-2022-38788 affects Nokia FastMile 5G Receiver 5G14-B, version 1.2104.00.0281. The root cause is an outdated Bluetooth pairing mechanism in the Nokia ODU, enabling a passive interception of a pairing handshake and, after offline cracking, retrieval of the PIN and LTK (long-term key). Exploitat...
CVE-2022-38788
An issue was discovered in Nokia FastMile 5G Receiver 5G14-B 1.2104.00.0281. Bluetooth on the Nokia ODU uses outdated pairing mechanisms, allowing an attacker to passively intercept a paring handshake and after offline cracking retrieve the PIN and LTK long-term key...
PT-2022-24567 · Nokia · Nokia Odu +1
Name of the Vulnerable Software and Affected Versions: Nokia FastMile 5G Receiver 5G14-B version 1.2104.00.0281 Description: An issue was discovered in the Bluetooth pairing mechanism of the Nokia ODU, which uses outdated pairing mechanisms. This allows an attacker to passively intercept a pairin...
CISA and NSA Publish Open Radio Access Network Security Considerations
CISA and the National Security Agency NSA have published Open Radio Access Network Security Considerations. This product—generated by the Enduring Security Framework ESF Open Radio Access Network RAN Working Panel, a subgroup within the cross-sector working group—assessed the benefits and securit...
Command injection
PROSCEND - PROSCEND / ADVICE .Ltd - G/5G Industrial Cellular Router with GPS4 Unauthenticated OS Command Injection Proscend M330-w / M33-W5 / M350-5G / M350-W5G / M350-6 / M350-W6 / M301-G / M301-GW ADVICE ICR 111WG /...
CVE-2022-36779 PROSCEND - PROSCEND / ADVICE .Ltd - G/5G Industrial Cellular Router (with GPS)4 Unauthenticated OS Command Injection
PROSCEND - PROSCEND / ADVICE .Ltd - G/5G Industrial Cellular Router with GPS4 Unauthenticated OS Command Injection Proscend M330-w / M33-W5 / M350-5G / M350-W5G / M350-6 / M350-W6 / M301-G / M301-GW ADVICE ICR 111WG /...
Pros and Cons of 5G
As private 5G networks continue to roll-out, CISOs and security leaders need to fully aware of the security implications to minimize cyber risk. Explore pros and cons as well as security tips for implementing private 5G...
