CVE-2023-4885: Multiple vulnerabilities in Open5GS
Published Oct 3, 2023
·Updated
Man in the Middle vulnerability, which could allow an attacker to intercept VNF (Virtual Network Function) communications resulting in the exposure of sensitive information.
Affected Software
1 affected component
open5gs open5gs<=2.4.10
Remediation
Information
Open5GS is working on a fix for the reported vulnerabilities.
Event History
Oct 3, 2023
CVE Published
via MITRE·02:50 PM
Data Sourced
via MITRE·02:50 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2023-4885?
CVE-2023-4885 is a Man in the Middle vulnerability that could allow an attacker to intercept VNF communications and expose sensitive information.
2
What is the severity of CVE-2023-4885?
The severity of CVE-2023-4885 is medium with a score of 5.9.
3
What software is affected by CVE-2023-4885?
Open5gs version 2.4.10 and below is affected by CVE-2023-4885.
4
How can CVE-2023-4885 be exploited?
CVE-2023-4885 can be exploited by an attacker intercepting VNF communications in a Man in the Middle attack.
5
Is there a fix for CVE-2023-4885?
Yes, updating Open5gs to a version higher than 2.4.10 will fix CVE-2023-4885.