CVE-2024-24428

HIGH 7.5EPSS 0.5%

A reachable assertion in the oai_nas_5gmm_decode function of Open5GS <= 2.6.4 allows attackers to cause a Denial of Service (DoS) via a crafted NGAP packet.

CVSS v3.1: 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v3.1: 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS: 0.49% chance of exploitation in the next 30 days, 40th percentile
Published: 2025-01-21
Updated: 2025-01-23

Proof-of-concept exploits (1)

https://cellularsecurity.org/ransacked

References

Related