PT-2022-24705

Name of the Vulnerable Software and Affected Versions Open5GS UPF affected versions not specified Description The issue occurs when Open5GS UPF receives a PFCP Session Establishment Request. It stores related values without checking the maximum length, which can lead to a memcpy overwrite of fiel...

CVE-2021-45462

In Open5GS 2.4.0, a crafted packet from UE can crash SGW-U/UPF...

CVE-2021-45462

In Open5GS 2.4.0, a crafted packet from UE can crash SGW-U/UPF...

Design/Logic Flaw

In Open5GS 2.4.0, a crafted packet from UE can crash SGW-U/UPF...

CVE-2021-45462

In Open5GS 2.4.0, a crafted packet from UE can crash SGW-U/UPF...

CVE-2021-45462

In Open5GS 2.4.0, a crafted packet from UE can crash SGW-U/UPF...

PT-2021-24241 · Open5Gs · Open5Gs

Name of the Vulnerable Software and Affected Versions: Open5GS version 2.4.0 Description: A crafted packet from a UE can cause a crash in the SGW-U/UPF component. This issue can potentially be used to deploy a denial-of-service DoS attack on private 5G networks. Recommendations: For Open5GS versi...

CVE-2021-45462: Improper Validation of Specified Quantity in Input

In Open5GS 2.4.0, a crafted packet from UE can crash SGW-U/UPF...

CVE-2021-45462

CVE-2021-45462 affects Open5GS 2.4.0, where a crafted packet from a UE can crash the SGW-U/UPF, potentially enabling DoS on private 5G networks. The issue is linked to the SGW-U/UPF component and is described across multiple sources (Open5GS commit reference; Red Hat entry; Trend Micro noting a D...

secretariavirtual.upf.edu Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1008613 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

grauobert.upf.edu XSS vulnerability

Vulnerable URL: https://grauobert.upf.edu/?ppid=3pstate=maximizedpmode=view&3strutsaction=/search/search&3keywords='"--! Details: Description| Value ---|--- Patched:| No Latest check for patch:| 06.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / No...