CVE-2023-52728

Open Networking Foundation SD-RAN ONOS onos-lib-go 0.10.25 allows an index out-of-range condition in putBitString...

CVE-2023-42358

An issue was discovered in O-RAN Software Community ric-plt-e2mgr in the G-Release environment, allows remote attackers to cause a denial of service DoS via a crafted request to the E2Manager API component...

Design/Logic Flaw

An issue was discovered in O-RAN Software Community ric-plt-e2mgr in the G-Release environment, allows remote attackers to cause a denial of service DoS via a crafted request to the E2Manager API component...

CVE-2023-42358

An issue was discovered in O-RAN Software Community ric-plt-e2mgr in the G-Release environment, allows remote attackers to cause a denial of service DoS via a crafted request to the E2Manager API component...

O-RAN Software Community ric-plt-e2mgr Security Vulnerability

O-RAN Software Community ric-plt-e2mgr is an open source library from O-RAN Software Community. A security vulnerability exists in O-RAN Software Community ric-plt-e2mgr. An attacker could exploit this vulnerability to cause a denial of service DoS by sending a specially crafted request to the...

CVE-2023-42358

CVE-2023-42358 affects the O-RAN Software Community ric-plt-e2mgr in the G-Release environment. A crafted request to the E2Manager API can cause a denial of service (DoS). Public sources (Red Hat, NVD, CNNVD, CVE listings) corroborate the DoS impact and indicate the issue exists without publicly ...

CVE-2023-42358

An issue was discovered in O-RAN Software Community ric-plt-e2mgr in the G-Release environment, allows remote attackers to cause a denial of service DoS via a crafted request to the E2Manager API component...

PT-2024-13038 · O Ran Software Community · Ric-Plt-E2Mgr

Name of the Vulnerable Software and Affected Versions: O-RAN Software Community ric-plt-e2mgr in the G-Release environment Description: An issue was discovered that allows remote attackers to cause a denial of service DoS via a crafted request to the E2Manager API component. Recommendations: At t...

Opening Critical Infrastructure: The Current State of Open RAN Security

The Open Radio Access Network ORAN architecture provides standardized interfaces and protocols to previously closed systems. However, our research on ORAN demonstrates the potential threat posed by malicious xApps that are capable of compromising the entire Ran Intelligent Controller RIC subsyste...

CVE-2023-41628

An issue in O-RAN Software Community E2 G-Release allows attackers to cause a Denial of Service DoS by incorrectly initiating the messaging procedure between the E2Node and E2Term components...

CVE-2023-41628

An issue in O-RAN Software Community E2 G-Release allows attackers to cause a Denial of Service DoS by incorrectly initiating the messaging procedure between the E2Node and E2Term components...

CVE-2023-41627

O-RAN Software Community ric-plt-lib-rmr v4.9.0 does not validate the source of the routing tables it receives, potentially allowing attackers to send forged routing tables to the device...

Code injection

O-RAN Software Community ric-plt-lib-rmr v4.9.0 does not validate the source of the routing tables it receives, potentially allowing attackers to send forged routing tables to the device...

Design/Logic Flaw

An issue in O-RAN Software Community E2 G-Release allows attackers to cause a Denial of Service DoS by incorrectly initiating the messaging procedure between the E2Node and E2Term components...

CVE-2023-41628

An issue in O-RAN Software Community E2 G-Release allows attackers to cause a Denial of Service DoS by incorrectly initiating the messaging procedure between the E2Node and E2Term components...

PT-2023-28008 · O Ran Software Community · O-Ran Software Community E2 G-Release

Name of the Vulnerable Software and Affected Versions: O-RAN Software Community E2 G-Release affected versions not specified Description: The issue allows attackers to cause a Denial of Service DoS by incorrectly initiating the messaging procedure between the E2Node and E2Term components...

CVE-2023-41628

An issue in O-RAN Software Community E2 G-Release allows attackers to cause a Denial of Service DoS by incorrectly initiating the messaging procedure between the E2Node and E2Term components...

CVE-2023-41628

CVE-2023-41628 affects the O-RAN Software Community E2 G-Release. A vulnerability in the messaging procedure between E2Node and E2Term can allow an attacker to cause a Denial of Service (DoS). The available documents specify the issue and its impact but do not provide explicit exploit details, af...

CVE-2023-41627

O-RAN Software Community ric-plt-lib-rmr v4.9.0 does not validate the source of the routing tables it receives, potentially allowing attackers to send forged routing tables to the device...

CVE-2023-41627

The CVE-2023-41627 issue affects O-RAN Software Community ric-plt-lib-rmr v4.9.0, where routing-table sources are not validated, enabling forged routing tables to be sent to a device. Multiple sources (Red Hat, NVD/CVE records, CNNVD, PRION, and PT-Security) corroborate this description. Impact i...