CVE-2023-37010

creationtimestamp| type| source ---|---|--- 2025-01-22 15:16:22+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgdnwy7jj42b...

CVE-2023-37010

Open5GS MME versions = 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send an eNB Status Transfer message missing a required MMEUES1APID field to repeatedly crash the MME, resulting in denial of service...

CVE-2023-37010

The Open5GS MME component (versions ≤ 2.6.4 ) is vulnerable to a remote denial of service (DoS) due to a reachable assertion (CWE-617 ). An attacker can trigger this by sending a malformed ASN.1 packet over the S1AP interface , specifically an eNB Status Transfer message that omits the mandatory ...

CVE-2023-37010

Open5GS MME versions = 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send an eNB Status Transfer message missing a required MMEUES1APID field to repeatedly crash the MME, resulting in denial of service...