CVE-2024-54982 | THREATINT

Description

An issue in Quectel BC25 with firmware version BC25PAR01A06 allows attackers to bypass authentication via a crafted NAS message. NOTE: Quectel disputes this because the issue is in the chipset supply chain and is not localized to one or more Quectel products.

PUBLISHED Reserved 2024-12-06 | Published 2024-12-19 | Updated 2025-01-16 | Assigner mitre

References

github.com/.../master/Quectel_BC25_Subscriber_Auth_Bypass.md

cve.org (CVE-2024-54982)

nvd.nist.gov (CVE-2024-54982)

Download JSON