CVE-2023-37007

creationtimestamp| type| source ---|---|--- 2025-01-22 15:16:06+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgdnwioq2e2b 2025-01-28 23:18:06+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3310...

CVE-2023-37007

Open5GS MME versions

CVE-2023-37007

Open5GS MME versions = 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send a Handover Cancel message missing a required MMEUES1APID field to repeatedly crash the MME, resulting in denial of service...