CVE-2024-34036

An issue was discovered in O-RAN Near Realtime RIC I-Release. To exploit this vulnerability, an attacker can disrupt the initial connection between a gNB and the Near RT-RIC by inundating the system with a high volume of subscription requests via an xApp...

CVE-2024-34035

An issue was discovered in O-RAN Near Realtime RIC H-Release. To trigger the crashing of the e2mgr, an adversary must flood the system with a significant quantity of E2 Subscription Requests originating from an xApp...

Nokia Airscale ASIKA Single RAN 安全漏洞

Nokia Airscale ASIKA Single RAN is an application for end-to-end use by Nokia of Finland. A security vulnerability exists in Nokia Airscale ASIKA Single RAN, which originates from a mobile network operator's personnel connected to the BTS Web Element Manager, regardless of their access rights, ma...

CVE-2024-25008

Ericsson RAN Compute and Site Controller 6610 contains a vulnerability in the Control System where Improper Input Validation can lead to arbitrary code execution, for example to obtain a Linux Shell with the same privileges as the attacker. The attacker would require elevated privileges for examp...

CVE-2024-25008 Ericsson RAN Compute and Site Controller 6610 - Improper Input Validation Vulnerability

Ericsson RAN Compute and Site Controller 6610 contains a vulnerability in the Control System where Improper Input Validation can lead to arbitrary code execution, for example to obtain a Linux Shell with the same privileges as the attacker. The attacker would require elevated privileges for examp...

CVE-2024-25008

Ericsson RAN Compute and Site Controller 6610 is affected by an Improper Input Validation vulnerability that can lead to arbitrary code execution, including obtaining a Linux shell with attacker privileges. The issue affects Ericsson RAN Compute and Site Controller 6610 software, with exploitatio...

CVE-2024-25008: Improper Input Validation

Ericsson RAN Compute and Site Controller 6610 contains a vulnerability in the Control System where Improper Input Validation can lead to arbitrary code execution, for example to obtain a Linux Shell with the same privileges as the attacker. The attacker would require elevated privileges for examp...

PT-2024-20697 · Ericsson · Ericsson Ran Compute/Site Controller 6610

Name of the Vulnerable Software and Affected Versions: Ericsson RAN Compute and Site Controller 6610 versions prior to 24.Q2 Description: The issue is related to improper input validation in the Control System, which can lead to arbitrary code execution. For example, it can be used to obtain a...

CVE-2024-34473

An issue was discovered in appmgr in O-RAN Near-RT RIC I-Release. An attacker could register an unintended RMR message type during xApp registration to disrupt other service components...

CVE-2024-34473

A security vulnerability exists in appmgr within O-RAN Near-RT RIC I-Release (affected versions not specified). Due to improper input validation (CWE-20), an attacker can register an unintended RMR message type during xApp registration. This action can result in the disruption of other service co...

CVE-2024-34473

An issue was discovered in appmgr in O-RAN Near-RT RIC I-Release. An attacker could register an unintended RMR message type during xApp registration to disrupt other service components...

CVE-2024-34473: Improper Input Validation

An issue was discovered in appmgr in O-RAN Near-RT RIC I-Release. An attacker could register an unintended RMR message type during xApp registration to disrupt other service components...

O-RAN RIC 安全漏洞

O-RAN RIC is a RIC application from O-RAN. A security vulnerability exists in O-RAN RIC I-Release, which stems from the fact that an attacker can register unintended RMR message types during registration to compromise other service components...

CVE-2023-52727

Open Networking Foundation SD-RAN ONOS onos-lib-go 0.10.25 allows an index out-of-range condition in parseAlignBits...

CVE-2024-34045

The O-RAN E2T I-Release Prometheus metric Increment function can crash in sctpThread.cpp for message.peerInfo-countersININITIMSGCOUNTERProcedureCodeidE2setup-Increment...

CVE-2023-52724

Open Networking Foundation SD-RAN onos-kpimon 0.4.7 allows out-of-bounds array access in the processIndicationFormat1 function...

CVE-2023-52728

Open Networking Foundation SD-RAN ONOS onos-lib-go 0.10.25 allows an index out-of-range condition in putBitString...

CVE-2023-52724

Open Networking Foundation SD-RAN onos-kpimon 0.4.7 allows out-of-bounds array access in the processIndicationFormat1 function...

CVE-2023-52725

Open Networking Foundation SD-RAN ONOS onos-kpimon 0.4.7 allows blocking of the errCh channel within the Start function of the monitoring package...

CVE-2023-52726

Open Networking Foundation SD-RAN ONOS onos-ric-sdk-go 0.8.12 allows infinite repetition of the processing of an error in the Subscribe function implementation for the subscribed indication stream...