CVE-2024-24458: Medium severity athonet mme vulnerability
Published Nov 15, 2024
·Updated
An invalid memory access when handling the ENB Configuration Transfer messages containing invalid PLMN Identities in Athonet vEPC MME v11.4.0 allows attackers to cause a Denial of Service (DoS) to the cellular network by repeatedly initiating connections and sending a crafted payload.
Affected Software
1 affected component
Athonet vEPC MME
Event History
Nov 15, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverity
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeakness
May 8, 57623
Event
via MITRE·12:16 AM
Frequently Asked Questions
1
What is the severity of CVE-2024-24458?
CVE-2024-24458 is classified as a Denial of Service (DoS) vulnerability.
2
How do I fix CVE-2024-24458?
To fix CVE-2024-24458, update your Athonet vEPC MME software to the latest version that addresses this vulnerability.
3
What type of attack does CVE-2024-24458 enable?
CVE-2024-24458 enables attackers to conduct a Denial of Service (DoS) attack on the cellular network.
4
Which software is affected by CVE-2024-24458?
CVE-2024-24458 affects Athonet vEPC MME version 11.4.0.
5
What is the impact of exploiting CVE-2024-24458?
Exploiting CVE-2024-24458 allows attackers to cause a disruption in service by sending crafted payloads.