CVE-2025-49494

A vulnerability exists in the 5G NRMM Packet Handler component of several Samsung processors, including Exynos 2100, 1280, 2200, 1330, 1380, 1480, 9110 , and Modem 5123 . The root cause is uncontrolled resource consumption due to the mishandling of an 5G NRMM packet. Successful exploitation by a ...

The vulnerability of the Mobility Management Element (MME) component, which is part of the NR/LTE Open5GS network creation and management tool, allows a attacker to trigger a service failure.

The vulnerability of the Mobility Management Entity MME component involved in the creation and management of the NR/LTE Open5GS mobile network is related to an uncontrolled, unverifiable assertion during the processing of the MMEUES1APID field. Exploiting this vulnerability could allow attackers ...

The vulnerability of the Mobility Management Element (MME) component, which is part of the NR/LTE Open5GS network creation and management tool, allows a attacker to trigger a service failure.

The vulnerability of the Mobility Management Entity MME component involved in the creation and management of the NR/LTE Open5GS mobile network is related to an uncontrolled, unverifiable assertion during the processing of the MMEUES1APID field. Exploiting this vulnerability could allow attackers ...

The vulnerability of the Mobility Management Element (MME) component, which is part of the NR/LTE Open5GS network creation and management tool, allows a attacker to trigger a service failure.

The vulnerability of the MME mobility management component, which is part of the NR/LTE Open5GS network creation and management tool, is related to an uncontrollable and unmanageable assertion. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the Mobility Management Element (MME) component, which is part of the NR/LTE Open5GS network creation and management tool, allows a attacker to trigger a service failure.

The vulnerability of the Mobility Management Entity MME component involved in the creation and management of the NR/LTE Open5GS mobile network is related to an uncontrolled, unregulated implementation during the processing of the MMEUES1APID field. Exploiting this vulnerability could allow a...

The vulnerability of the Mobility Management Element (MME) component, which is part of the NR/LTE Open5GS network creation and management tool, allows a attacker to trigger a service failure.

The vulnerability of the Mobility Management Entity MME component involved in the creation and management of the NR/LTE Open5GS mobile network is related to an uncontrolled, unmanageable assertion during the processing of the MMEUES1APID field. Exploiting this vulnerability could allow a maliciou...

The vulnerability of the Mobility Management Element (MME) component, which is part of the NR/LTE Open5GS network creation and management tool, allows a attacker to trigger a service failure.

The vulnerability of the Mobility Management Entity MME component involved in the creation and management of the NR/LTE Open5GS mobile network is related to an uncontrolled, unverifiable assertion during the processing of the MMEUES1APID field. Exploiting this vulnerability could allow attackers ...

The vulnerability of the Mobility Management Element (MME) component, which is part of the NR/LTE Open5GS network creation and management tool, allows a attacker to trigger a service failure.

The vulnerability of the MME mobility management component, which is part of the NR/LTE Open5GS network creation and management tool, is related to an uncontrollable and unproven implementation. Exploiting this vulnerability could allow attackers to cause service failures...

The vulnerability of the Mobility Management Element (MME) component, which is part of the NR/LTE Open5GS network creation and management tool, allows a attacker to trigger a service failure.

The vulnerability of the Mobility Management Entity MME component involved in the creation and management of the NR/LTE Open5GS mobile network is related to an uncontrolled, unregulated implementation during the processing of the MMEUES1APID field. Exploiting this vulnerability could allow a...

The vulnerability of the Mobility Management Element (MME) component, which is part of the NR/LTE Open5GS network creation and management tool, allows a attacker to trigger a service failure.

The vulnerability of the MME mobility management component, which is part of the NR/LTE Open5GS network creation and management tool, relates to an uncontrolled, unmanageable assertion during the processing of the PLMN Identity field. Exploiting this vulnerability could allow a attacker to cause...

The vulnerability of the Mobility Management Element (MME) component, which is part of the NR/LTE Open5GS network creation and management tool, allows a attacker to trigger a service failure.

The vulnerability of the Mobility Management Entity MME component involved in the creation and management of the NR/LTE Open5GS mobile network is related to an uncontrolled, unverifiable assertion during the processing of the MMEUES1APID field. Exploiting this vulnerability could allow attackers ...

WSO2多款产品 安全漏洞

WSO2 API Manager is an API lifecycle management solution, WSO2 API Manager Analytics is an analytics component, and WSO2 API Control Plane is a control panel. A security vulnerability exists in a number of WSO2 products. The vulnerability stems from insufficient enforcement of permissions in the...

CVE-2025-37138

An authenticated command injection vulnerability exists in the command line interface binary of AOS-10 GW and AOS-8 Controllers/Mobility Conductor operating system. Exploitation of this vulnerability requires physical access to the hardware controllers. A successful attack could allow an...

CVE-2025-37136

Arbitrary file deletion vulnerabilities have been identified in the command-line interface of an AOS-8 Controller/Mobility Conductor. Successful exploitation of these vulnerabilities could allow an authenticated remote malicious actor to delete arbitrary files within the affected system...

CVE-2025-37137

Arbitrary file deletion vulnerabilities have been identified in the command-line interface of an AOS-8 Controller/Mobility Conductor. Successful exploitation of these vulnerabilities could allow an authenticated remote malicious actor to delete arbitrary files within the affected system...

CVE-2025-37134

An authenticated command injection vulnerability exists in the CLI binary of an AOS-8 Controller/Mobility Conductor operating system. Successful exploitation could allow an authenticated malicious actor to execute arbitrary commands as a privileged user on the underlying operating system...

CVE-2025-37133

An authenticated command injection vulnerability exists in the CLI binary of an AOS-8 Controller/Mobility Conductor operating system. Successful exploitation could allow an authenticated malicious actor to execute arbitrary commands as a privileged user on the underlying operating system...

EUVD-2025-34405

An arbitrary file download vulnerability exists in the web-based management interface of AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems. Successful exploitation could allow an Authenticated malicious actor to download arbitrary files through carefully constructed exploits...

EUVD-2025-34433

Arbitrary file download vulnerabilities exist in the CLI binary of AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems. Successful exploitation could allow an authenticated malicious actor to download arbitrary files through carefully constructed exploits...

CVE-2025-37144

Arbitrary file download vulnerabilities exist in a low-level interface library in AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems. Successful exploitation could allow an authenticated malicious actor to download arbitrary files through carefully constructed exploits...