Open5gs

Open5gs

191 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.6

CVE-2023-37016

Exploit
  • EPSS 0.78%
  • Veröffentlicht 22.01.2025 15:15:11
  • Zuletzt bearbeitet 22.04.2025 17:15:20

Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send a `UE Context Modification Response` message missing a required `MME_UE_S1AP_ID` field to rep...

8.6

CVE-2023-37017

Exploit
  • EPSS 0.78%
  • Veröffentlicht 22.01.2025 15:15:11
  • Zuletzt bearbeitet 22.04.2025 17:15:17

Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send an `S1Setup Request` message missing a required `Global eNB ID` field to repeatedly crash the...

8.6

CVE-2023-37018

Exploit
  • EPSS 0.78%
  • Veröffentlicht 22.01.2025 15:15:11
  • Zuletzt bearbeitet 22.04.2025 17:15:13

Open5GS MME versions <= 2.6.4 contains an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send a `UE Capability Info Indication` message missing a required `MME_UE_S1AP_ID` field to repea...

8.6

CVE-2023-37019

Exploit
  • EPSS 0.78%
  • Veröffentlicht 22.01.2025 15:15:11
  • Zuletzt bearbeitet 22.04.2025 17:15:09

Open5GS MME versions <= 2.6.4 contains an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send an `S1Setup Request` message missing a required `Supported TAs` field to repeatedly crash th...

8.6

CVE-2023-37020

Exploit
  • EPSS 0.78%
  • Veröffentlicht 22.01.2025 15:15:11
  • Zuletzt bearbeitet 22.04.2025 17:15:07

Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send a `UE Context Release Complete` message missing a required `MME_UE_S1AP_ID` field to repeated...

8.6

CVE-2023-37021

Exploit
  • EPSS 0.78%
  • Veröffentlicht 22.01.2025 15:15:11
  • Zuletzt bearbeitet 22.04.2025 17:15:04

Open5GS MME version <= 2.6.4 contains an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send a `UE Context Modification Failure` message missing a required `MME_UE_S1AP_ID` field to repe...

7.5

CVE-2023-37022

Exploit
  • EPSS 0.78%
  • Veröffentlicht 22.01.2025 15:15:11
  • Zuletzt bearbeitet 22.04.2025 17:13:19

Open5GS MME versions <= 2.6.4 contain a reachable assertion in the `UE Context Release Request` packet handler. A packet containing an invalid `MME_UE_S1AP_ID` field causes Open5gs to crash; an attacker may repeatedly send such packets to cause denia...

8.6

CVE-2023-37023

Exploit
  • EPSS 0.78%
  • Veröffentlicht 22.01.2025 15:15:11
  • Zuletzt bearbeitet 22.04.2025 17:13:07

Open5GS MME versions <= 2.6.4 contain a reachable assertion in the `Uplink NAS Transport` packet handler. A packet missing its `MME_UE_S1AP_ID` field causes Open5gs to crash; an attacker may repeatedly send such packets to cause denial of service.

5.3

CVE-2023-37005

Exploit
  • EPSS 0.27%
  • Veröffentlicht 22.01.2025 15:15:10
  • Zuletzt bearbeitet 22.04.2025 17:14:13

Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send an `Initial Context Setup Failure` message missing a required `MME_UE_S1AP_ID` field to repea...

5.3

CVE-2023-37006

Exploit
  • EPSS 0.27%
  • Veröffentlicht 22.01.2025 15:15:10
  • Zuletzt bearbeitet 22.04.2025 17:14:11

Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send a `Handover Request Ack` message missing a required `MME_UE_S1AP_ID` field to repeatedly cras...