CVE-2023-37027

Опубликовано: 21 янв. 2025

Источник: nvd

CVSS3: 6.5

CVSS3: 5.7

EPSS Низкий

Описание

Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP E-RAB Modification Indication packet missing an expected eNB_UE_S1AP_ID field.

Ссылки

https://cellularsecurity.org/ransacked
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:linuxfoundation:magma:*:*:*:*:*:*:*:*

Версия до 1.9 (исключая)

EPSS

Процентиль: 33%

0.00133

Низкий

6.5 Medium

CVSS3

5.7 Medium

CVSS3

Дефекты

CWE-476

Связанные уязвимости

GHSA-jj8f-p8pv-qqm3

CVSS3: 6.5

github

около 1 года назад

Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `E-RAB Modification Indication` packet missing an expected `eNB_UE_S1AP_ID` field.

EPSS

Процентиль: 33%

0.00133

Низкий

6.5 Medium

CVSS3

5.7 Medium

CVSS3

Дефекты

CWE-476