CVE-2023-41628: High severity o-ran sc e2 vulnerability

Published Sep 1, 2023

Updated

An issue in O-RAN Software Community E2 G-Release allows attackers to cause a Denial of Service (DoS) by incorrectly initiating the messaging procedure between the E2Node and E2Term components.

Affected Software

1 affected component

O-ran-sc E2=g-release

Event History

Sep 1, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2023-41628?

CVE-2023-41628 has been categorized as a medium severity vulnerability due to its potential to cause Denial of Service (DoS).

How do I fix CVE-2023-41628?

To mitigate CVE-2023-41628, upgrade to the latest patched version of O-RAN Software Community E2 G-Release or apply relevant configuration changes recommended by the vendor.

What systems are affected by CVE-2023-41628?

CVE-2023-41628 affects the O-RAN Software Community E2 G-Release implementation specifically.

What impact does CVE-2023-41628 have?

Exploitation of CVE-2023-41628 can result in a Denial of Service (DoS), disrupting communications between E2Node and E2Term components.

Is there a workaround for CVE-2023-41628?

Currently, there are no documented workarounds specifically for CVE-2023-41628; upgrading the software is recommended.