355 matches found
PT-2024-20398 · Unknown · Openairinterface Cn5G Amf
Name of the Vulnerable Software and Affected Versions: OpenAirInterface CN5G AMF versions up to 2.0.0 Description: The issue is caused by an uninitialized pointer dereference in the NasPdu::NasPdu component, allowing attackers to cause a Denial of Service DoS via a crafted InitialUEMessage messag...
CVE-2024-24455
An invalid memory access when handling a UE Context Release message containing an invalid UE identifier in Athonet vEPC MME v11.4.0 allows attackers to cause a Denial of Service DoS to the cellular network by repeatedly initiating connections and sending a crafted payload...
CVE-2024-24455
CVE-2024-24455 affects Hewlett Packard Enterprise Athonet vEPC MME (version 11.4.0). The issue is an invalid memory access when handling a UE Context Release message that contains an invalid UE identifier, which can allow an attacker to cause a Denial of Service (DoS) to the cellular network by r...
PT-2024-20404
Name of the Vulnerable Software and Affected Versions Athonet vEPC MME version 11.4.0 Description The issue arises from an invalid memory access when handling a UE Context Release message that contains an invalid UE identifier. This allows attackers to cause a Denial of Service DoS to the cellula...
CVE-2024-24455: Out-of-bounds Read
An invalid memory access when handling a UE Context Release message containing an invalid UE identifier in Athonet vEPC MME v11.4.0 allows attackers to cause a Denial of Service DoS to the cellular network by repeatedly initiating connections and sending a crafted payload...
CVE-2024-23385
Transient DOS as modem reset occurs when an unexpected MAC RAR with invalid PDU length is seen at UE...
CVE-2024-23385 Reachable Assertion in Modem
Transient DOS as modem reset occurs when an unexpected MAC RAR with invalid PDU length is seen at UE...
CVE-2024-23385
CVE-2024-23385 affects Qualcomm closed‑source components. The issue is a Transient DoS where a modem reset occurs when an unexpected MAC RAR (with invalid PDU length) is observed at the user equipment (UE). The connected sources confirm the affected vendor and the high availability impact, but do...
PT-2024-19860
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description A temporary denial of service DOS occurs when a modem resets due to an unexpected MAC RAR with an invalid PDU length seen at the UE. This issue arises whe...
PUB-A-335031446
there is a possible man-in-the-middle attack due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PUB-A-335031447
In the RRC code of the modem firmware, there is a possible information disclosure due to a logic error in the code. This could lead to remote proximal/adjacent information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-23353
Transient DOS while decoding attach reject message received by UE, when IEI is set to ESMIEI...
CVE-2024-23350
Permanent DOS when DL NAS transport receives multiple payloads such that one payload contains SOR container whose integrity check has failed, and the other is LPP where UE needs to send status message to network...
CVE-2024-23353
CVE-2024-23353 affects Qualcomm components (Multi Mode Call Processor) and describes a transient denial-of-service during decoding an attach reject message received by UE when IEI is set to ESM_IEI. CVSSv3.1 base score 7.5 (High) with network attack vector, no user interaction, and impact limited...
CVE-2024-23353 Buffer Over-read in Multi Mode Call Processor
Transient DOS while decoding attach reject message received by UE, when IEI is set to ESMIEI...
CVE-2024-23350
CVE-2024-23350 relates to a permanent Denial of Service in Qualcomm Snapdragon software, triggered when the DL NAS transport processes multiple payloads: one payload with a SOR container failing its integrity check and another LPP where the UE must send a status message. Root cause cited as an un...
CVE-2024-23350 Reachable Assertion in Multi Mode Call Processor
Permanent DOS when DL NAS transport receives multiple payloads such that one payload contains SOR container whose integrity check has failed, and the other is LPP where UE needs to send status message to network...
CVE-2024-33382: Uncontrolled Resource Consumption
An issue in Open5GS v.2.7.0 allows an attacker to cause a denial of service via the 64 unsuccessful UE/gnb registration...
