CVE-2024-24459: Medium severity athonet mme vulnerability
An invalid memory access when handling the ProtocolIEID field of S1Setup Request messages in Athonet vEPC MME v11.4.0 allows attackers to cause a Denial of Service (DoS) to the cellular network by repeatedly initiating connections and sending a crafted payload.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-24459?
CVE-2024-24459 is classified as a high severity vulnerability due to its potential to cause Denial of Service to the cellular network.
How do I fix CVE-2024-24459?
To mitigate CVE-2024-24459, update Athonet vEPC MME to the latest version where this vulnerability has been addressed.
What systems are affected by CVE-2024-24459?
CVE-2024-24459 affects Athonet vEPC MME version 11.4.0.
What kind of impact does CVE-2024-24459 have?
Exploiting CVE-2024-24459 can allow attackers to bring down the cellular network by causing a denial of service.
Is CVE-2024-24459 being actively exploited?
As of the latest information, there are indications that CVE-2024-24459 could be actively exploited in the wild.