CVE-2024-24457: Medium severity athonet mme vulnerability
An invalid memory access when handling the ProtocolIEID field of E-RAB Setup List Context SURes messages in Athonet vEPC MME v11.4.0 allows attackers to cause a Denial of Service (DoS) to the cellular network by repeatedly initiating connections and sending a crafted payload.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-24457?
CVE-2024-24457 has been rated with a high severity level due to its potential to cause a Denial of Service to cellular networks.
How do I fix CVE-2024-24457?
To mitigate CVE-2024-24457, it is advisable to update the Athonet vEPC MME software to the latest patched version.
What vulnerabilities are associated with CVE-2024-24457?
CVE-2024-24457 is associated with potential Denial of Service attacks through invalid memory access in E-RAB Setup List Context SURes messages.
Who is affected by CVE-2024-24457?
Athonet vEPC MME users, specifically those using version 11.4.0, are affected by CVE-2024-24457.
What can an attacker do with CVE-2024-24457?
An attacker can exploit CVE-2024-24457 by initiating connections and sending crafted payloads to disrupt cellular network services.