CVE-2024-24454: Medium severity athonet mme vulnerability

Published Nov 15, 2024

Updated

An invalid memory access when handling the ProtocolIEID field of E-RAB Modify Request messages in Athonet vEPC MME v11.4.0 allows attackers to cause a Denial of Service (DoS) to the cellular network by repeatedly initiating connections and sending a crafted payload.

Affected Software

1 affected component

Athonet vEPC MME

Event History

Nov 15, 2024

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionSeverity

Data Sourced

via NVD·08:15 PM

DescriptionSeverityWeakness

Mar 27, 57623

Event

via MITRE·03:47 AM

Frequently Asked Questions

What is the severity of CVE-2024-24454?

CVE-2024-24454 has a critical severity rating due to its potential to cause a Denial of Service (DoS) in cellular networks.

How do I fix CVE-2024-24454?

To fix CVE-2024-24454, update to the latest patched version of the Athonet vEPC MME software.

What kind of attack can CVE-2024-24454 enable?

CVE-2024-24454 can enable attackers to initiate multiple connections and send crafted payloads to disrupt cellular network services.

Which software is affected by CVE-2024-24454?

CVE-2024-24454 affects Athonet vEPC MME version 11.4.0.

Can CVE-2024-24454 be exploited remotely?

Yes, CVE-2024-24454 can be exploited remotely by attackers targeting the ProtocolIE_ID field of E-RAB Modify Request messages.