CVE-2024-51179: High severity Open 5GS Open 5GS vulnerability

Published Nov 12, 2024

Updated

An issue in Open 5GS v.2.7.1 allows a remote attacker to cause a denial of service via the Network Function Virtualizations (NFVs) such as the User Plane Function (UPF) and the Session Management Function (SMF), The Packet Data Unit (PDU) session establishment process.

Affected Software

2 affected components

Open 5GS Open 5GS

open5gs open5gs=2.7.1

Event History

Nov 12, 2024

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·10:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-51179?

CVE-2024-51179 is a high-severity vulnerability that allows for denial of service attacks in Open 5GS v2.7.1.

How do I fix CVE-2024-51179?

To fix CVE-2024-51179, upgrade your Open 5GS installation to a patched version that addresses this vulnerability.

What components are affected by CVE-2024-51179?

CVE-2024-51179 affects the User Plane Function (UPF) and the Session Management Function (SMF) within Open 5GS v2.7.1.

Can CVE-2024-51179 be exploited remotely?

Yes, CVE-2024-51179 can be exploited remotely, allowing attackers to disrupt the PDU session establishment process.

What type of attacks can CVE-2024-51179 enable?

CVE-2024-51179 can enable denial of service attacks against network functionalities in Open 5GS systems.