5.9
Medium
CVE-2024-24455 An invalid memory access when handling a UE Context Release message containing an invalid UE identifier in Athonet…
Description
An invalid memory access when handling a UE Context Release message containing an invalid UE identifier in Athonet vEPC MME v11.4.0 allows attackers to cause a Denial of Service (DoS) to the cellular network by repeatedly initiating connections and sending a crafted payload.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| HPE Athonet Core 11.6 | earliest → 11.6 | No fix stated |
Other CVEs of HPE Athonet Core
The 8 CVEs of HPE Athonet Core →
CVE-2024-24456
An E-RAB Release Command packet containing a malformed NAS PDU will cause the Athonet MME to immediately crash,…
5.9
Medium
CVE-2024-24458
An invalid memory access when handling the ENB Configuration Transfer messages containing invalid PLMN Identities in…
5.9
Medium
CVE-2024-24459
An invalid memory access when handling the ProtocolIE_ID field of S1Setup Request messages in Athonet vEPC MME v11.4.0…
5.9
Medium
CVE-2024-24452
An invalid memory access when handling the ProtocolIE_ID field of E-RAB Release Indication messages in Athonet vEPC…
5.9
Medium