CVE-2023-37002

creationtimestamp| type| source ---|---|--- 2025-01-22 15:15:44+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgdnvtqhdb2x...

CVE-2023-37002

Open5GS MME versions = 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send an E-RAB Modification Indication message missing a required MMEUES1APID field to repeatedly crash the MME, resulting in denial of service...

CVE-2023-37002

Open5GS MME versions prior to 2.6.4 are vulnerable to a denial of service (DoS) attack caused by a reachable assertion. An attacker can remotely trigger this crash by sending a malformed ASN.1 packet over the S1AP interface , specifically an E-RAB Modification Indication message that lacks the re...