CVE-2024-24453: Medium severity athonet mme vulnerability
Published Nov 15, 2024
·Updated
An invalid memory access when handling the ProtocolIEID field of E-RAB NotToBeModifiedBearerModInd information element in Athonet vEPC MME v11.4.0 allows attackers to cause a Denial of Service (DoS) to the cellular network by repeatedly initiating connections and sending a crafted payload.
Affected Software
1 affected component
Athonet vEPC MME
Event History
Nov 15, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverity
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-24453?
CVE-2024-24453 is classified as a Denial of Service (DoS) vulnerability.
2
How do I fix CVE-2024-24453?
To fix CVE-2024-24453, update to the latest version of Athonet vEPC MME that addresses this vulnerability.
3
What type of attack does CVE-2024-24453 enable?
CVE-2024-24453 enables attackers to perform a Denial of Service attack on the cellular network.
4
Which software is affected by CVE-2024-24453?
CVE-2024-24453 affects Athonet vEPC MME version 11.4.0.
5
Is any workaround available for CVE-2024-24453?
There are currently no documented workarounds for mitigating CVE-2024-24453.