5.9
Medium
CVE-2024-24458 An invalid memory access when handling the ENB Configuration Transfer messages containing invalid PLMN Identities in…
Description
An invalid memory access when handling the ENB Configuration Transfer messages containing invalid PLMN Identities in Athonet vEPC MME v11.4.0 allows attackers to cause a Denial of Service (DoS) to the cellular network by repeatedly initiating connections and sending a crafted payload.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| HPE Athonet Core 11.6 | earliest → 11.6 | No fix stated |
Other CVEs of HPE Athonet Core
The 8 CVEs of HPE Athonet Core →
CVE-2024-24456
An E-RAB Release Command packet containing a malformed NAS PDU will cause the Athonet MME to immediately crash,…
5.9
Medium
CVE-2024-24459
An invalid memory access when handling the ProtocolIE_ID field of S1Setup Request messages in Athonet vEPC MME v11.4.0…
5.9
Medium
CVE-2024-24452
An invalid memory access when handling the ProtocolIE_ID field of E-RAB Release Indication messages in Athonet vEPC…
5.9
Medium
CVE-2024-24453
An invalid memory access when handling the ProtocolIE_ID field of E-RAB NotToBeModifiedBearerModInd information…
5.9
Medium