CVE-2024-24456 | THREATINT

Description

An E-RAB Release Command packet containing a malformed NAS PDU will cause the Athonet MME to immediately crash, potentially due to a buffer overflow.

Reserved 2024-01-25 | Published 2025-03-31 | Updated 2025-04-03 | Assigner hpe

MEDIUM: 5.9CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Product status

Default status

unaffected

HPE Athonet Core 11.0

affected

Credits

This vulnerability was discovered by Bennett, N., Zhu, W., Simon, B., Kennedy, R., Enck, W., Traynor, P., Butler, K. (2024). RANsacked: A Domain-Informed Approach for Fuzzing LTE and 5G RAN-Core Interfaces. https://nathanielbennett.com/publications/ransacked.pdf finder

References

support.hpe.com/...y?docId=hpesbnw04780en_us&docLocale=en_US

cve.org (CVE-2024-24456)

nvd.nist.gov (CVE-2024-24456)

Download JSON