CVE-2024-24455: Medium severity athonet mme vulnerability
An invalid memory access when handling a UE Context Release message containing an invalid UE identifier in Athonet vEPC MME v11.4.0 allows attackers to cause a Denial of Service (DoS) to the cellular network by repeatedly initiating connections and sending a crafted payload.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-24455?
CVE-2024-24455 is classified as a critical vulnerability due to its potential to allow attackers to cause a Denial of Service (DoS) in the cellular network.
How do I fix CVE-2024-24455?
To remediate CVE-2024-24455, update the Athonet vEPC MME to the latest version that addresses this vulnerability.
What impact does CVE-2024-24455 have on cellular networks?
CVE-2024-24455 can disrupt cellular network operations by allowing attackers to initiate connections that lead to service downtime.
Who is affected by CVE-2024-24455?
CVE-2024-24455 affects users of Athonet vEPC MME version 11.4.0 or earlier versions.
How does CVE-2024-24455 exploit the system?
CVE-2024-24455 exploits the system by sending a crafted payload containing an invalid UE identifier, resulting in invalid memory access.