Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-36932 State: PUBLISHED Published: 2023-07-05T00:00:00 Last Updated: 2024-11-21T14:39:55.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Progress MOVEit Transfer before 2020.1.11 (12.1.11), 2021.0.9 (13.0.9), 2021.1.7 (13.1.7), 2022.0.7 (14.0.7), 2022.1.8 (14.1.8), and 2023.0.4 (15.0.4), multiple SQL injection vulnerabilities have been identified in the MOVEit Transfer web application that could allow an authenticated attacker to gain unauthorized access to the MOVEit Transfer database. An attacker could submit a crafted payload to a MOVEit Transfer application endpoint that could result in modification and disclosure of MOVEit database content. Additional
t Transfer application endpoint that could result in modification and disclosure of MOVEit database content. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.progress.com/moveit - https://community.progress.com/s/article/MOVEit-Transfer-2020-1-Service-Pack-July-2023
CVE ID: CVE-2023-36933 State: PUBLISHED Published: 2023-07-05T00:00:00 Last Updated: 2024-11-21T14:38:28.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Progress MOVEit Transfer before 2021.0.9 (13.0.9), 2021.1.7 (13.1.7), 2022.0.7 (14.0.7), 2022.1.8 (14.1.8), and 2023.0.4 (15.0.4), it is possible for an attacker to invoke a method that results in an unhandled exception. Triggering this workflow can cause the MOVEit Transfer application to terminate unexpectedly. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.progress.com/moveit - https://community.progress.com/s/article/MOVEit-Transfer-2020-1-Service-Pack-July-2023
CVE ID: CVE-2023-36934 State: PUBLISHED Published: 2023-07-05T00:00:00 Last Updated: 2024-11-21T14:36:15.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Progress MOVEit Transfer before 2020.1.11 (12.1.11), 2021.0.9 (13.0.9), 2021.1.7 (13.1.7), 2022.0.7 (14.0.7), 2022.1.8 (14.1.8), and 2023.0.4 (15.0.4), a SQL injection vulnerability has been identified in the MOVEit Transfer web application that could allow an unauthenticated attacker to gain unauthorized access to the MOVEit Transfer database. An attacker could submit a crafted payload to a MOVEit Transfer application endpoint that could result in modification and disclosure of MOVEit database content. Additional Analyst
er application endpoint that could result in modification and disclosure of MOVEit database content. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.progress.com/moveit - https://community.progress.com/s/article/MOVEit-Transfer-2020-1-Service-Pack-July-2023
CVE ID: CVE-2023-36935 State: REJECTED Published: N/A Last Updated: 2023-07-09T00:00:00 Description: No description available.
CVE ID: CVE-2023-36936 State: PUBLISHED Published: 2023-07-10T00:00:00 Last Updated: 2024-08-02T17:01:10.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-Site Scripting (XSS) vulnerability in PHPGurukul Online Security Guards Hiring System using PHP and MySQL 1.0 allows attackers to execute arbitrary code via a crafted payload to the search booking box. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com - https://medium.com/%40ridheshgohil1092/cve-2023-36936-xss-online-security-guards-hiring-system-773f394f6117
CVE ID: CVE-2023-36939 State: PUBLISHED Published: 2023-07-10T00:00:00 Last Updated: 2024-08-02T17:01:10.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-Site Scripting (XSS) vulnerability in Hostel Management System v2.1 allows an attacker to execute arbitrary code via a crafted payload to the search booking field. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com - https://medium.com/%40ridheshgohil1092/cve-2023-36939-xss-online-security-guards-hiring-system-7547ee114134
CVE ID: CVE-2023-36940 State: PUBLISHED Published: 2023-07-10T00:00:00 Last Updated: 2024-08-02T17:01:10.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting (XSS) vulnerability in PHPGurukul Online Fire Reporting System Using PHP and MySQL v.1.2 allows attackers to execute arbitrary code via a crafted payload injected into the search field. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com - https://medium.com/%40ridheshgohil1092/cve-2023-36940-xss-on-online-fire-reporting-system-v-1-2-1d3fa170e4d6
CVE ID: CVE-2023-36941 State: PUBLISHED Published: 2023-07-27T00:00:00 Last Updated: 2024-08-02T17:01:09.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in PHPGurukul Online Fire Reporting System Using PHP and MySQL 1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the team name, leader, and member fields. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com - https://medium.com/%40ridheshgohil1092/cve-2023-36941-xss-on-online-fire-reporting-system-v-1-2-df84d7ac3fd1
CVE ID: CVE-2023-36942 State: PUBLISHED Published: 2023-07-27T00:00:00 Last Updated: 2024-08-02T17:01:10.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in PHPGurukul Online Fire Reporting System Using PHP and MySQL 1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the website title field. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com - https://medium.com/%40ridheshgohil1092/cve-2023-36942-xss-on-online-fire-reporting-system-v-1-2-19357e54978c
CVE ID: CVE-2023-36947 State: PUBLISHED Published: 2023-10-16T00:00:00 Last Updated: 2024-09-12T12:52:18.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the File parameter in the function UploadCustomModule. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Archerber/bug_submit/blob/main/TOTOLINK/UploadCustomModule.md
CVE ID: CVE-2023-36950 State: PUBLISHED Published: 2023-10-16T00:00:00 Last Updated: 2024-09-12T12:52:28.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the http_host parameter in the function loginAuth. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Archerber/bug_submit/blob/main/TOTOLINK/loginauth.md
CVE ID: CVE-2023-36952 State: PUBLISHED Published: 2023-10-16T00:00:00 Last Updated: 2024-09-16T18:51:49.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK CP300+ V5.2cu.7594_B20200910 was discovered to contain a stack overflow via the pingIp parameter in the function setDiagnosisCfg. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Archerber/bug_submit/blob/main/TOTOLINK/CP300%2B_1.md
CVE ID: CVE-2023-36953 State: PUBLISHED Published: 2023-10-16T00:00:00 Last Updated: 2024-09-16T18:49:19.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK CP300+ V5.2cu.7594_B20200910 and before is vulnerable to command injection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Archerber/bug_submit/blob/main/TOTOLINK/CP300%2B_2.md
CVE ID: CVE-2023-36954 State: PUBLISHED Published: 2023-10-16T00:00:00 Last Updated: 2024-09-16T18:47:18.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK CP300+ V5.2cu.7594_B20200910 and before is vulnerable to command injection. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Archerber/bug_submit/blob/main/TOTOLINK/CP300%2B_3.md
CVE ID: CVE-2023-36955 State: PUBLISHED Published: 2023-10-16T00:00:00 Last Updated: 2024-09-16T18:43:22.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK CP300+ <=V5.2cu.7594_B20200910 was discovered to contain a stack overflow via the File parameter in the function UploadCustomModule. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Archerber/bug_submit/blob/main/TOTOLINK/CP300%2B_4.md
CVE ID: CVE-2023-36968 State: PUBLISHED Published: 2023-07-06T00:00:00 Last Updated: 2024-11-19T17:24:35.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL Injection vulnerability detected in Food Ordering System v1.0 allows attackers to run commands on the database by sending crafted SQL queries to the ID parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/haxxorsid/food-ordering-system - https://okankurtulus.com.tr/2023/06/21/food-ordering-system-v1-0-authenticated-sql-injection/
CVE ID: CVE-2023-36969 State: PUBLISHED Published: 2023-07-06T00:00:00 Last Updated: 2024-11-19T17:16:26.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: CMS Made Simple v2.2.17 is vulnerable to Remote Command Execution via the File Upload Function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://okankurtulus.com.tr/2023/06/26/cms-made-simple-v2-2-17-file-upload-remote-code-execution-rce-authenticated/
CVE ID: CVE-2023-36970 State: PUBLISHED Published: 2023-07-06T00:00:00 Last Updated: 2024-11-19T17:14:04.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-site scripting (XSS) vulnerability in CMS Made Simple v2.2.17 allows remote attackers to inject arbitrary web script or HTML via the File Upload function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://okankurtulus.com.tr/2023/06/27/cms-made-simple-v2-2-17-stored-cross-site-scripting-xss-authenticated/
CVE ID: CVE-2023-36980 State: PUBLISHED Published: 2023-09-11T00:00:00 Last Updated: 2024-09-26T14:36:51.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Ethereum Blockchain v0.1.1+commit.6ff4cd6 cause the balance to be zeroed out when the value of betsize+casino.balance exceeds the threshold. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://etherscan.io/ - https://github.com/WayneLi12/CVEs/tree/master/CVE-2023-36980
CVE ID: CVE-2023-36983 State: PUBLISHED Published: 2023-08-01T00:00:00 Last Updated: 2024-10-17T20:25:06.736Z Vendors: n/a Products: n/a Problem Types: n/a Description: LavaLite CMS v 9.0.0 is vulnerable to Sensitive Data Exposure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/LavaLite/cms - https://github.com/M19O/Security-Advisories/tree/main/CVE-2023-36983
CVE ID: CVE-2023-36984 State: PUBLISHED Published: 2023-08-01T00:00:00 Last Updated: 2024-10-17T20:24:06.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: LavaLite CMS v 9.0.0 is vulnerable to Sensitive Data Exposure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/LavaLite/cms - https://github.com/M19O/Security-Advisories/tree/main/CVE-2023-36984
CVE ID: CVE-2023-36992 State: PUBLISHED Published: 2023-07-07T00:00:00 Last Updated: 2024-11-13T20:57:49.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP injection in TravianZ 8.3.4 and 8.3.3 in the config editor in the admin page allows remote attackers to execute PHP code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bramdoessecurity.com/travianz-hacked/
CVE ID: CVE-2023-36993 State: PUBLISHED Published: 2023-07-07T00:00:00 Last Updated: 2024-11-13T20:55:56.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cryptographically insecure random number generator being used in TravianZ 8.3.4 and 8.3.3 in the password reset function allows an attacker to guess the password reset.parameters and to take over accounts. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bramdoessecurity.com/travianz-hacked/
CVE ID: CVE-2023-36994 State: PUBLISHED Published: 2023-07-07T00:00:00 Last Updated: 2024-11-13T20:55:10.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: In TravianZ 8.3.4 and 8.3.3, Incorrect Access Control in the installation script allows an attacker to overwrite the server configuration and inject PHP code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bramdoessecurity.com/travianz-hacked/
CVE ID: CVE-2023-36995 State: PUBLISHED Published: 2023-07-06T00:00:00 Last Updated: 2024-11-19T17:13:27.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: TravianZ through 8.3.4 allows XSS via the Alliance tag/name, the statistics page, the link preferences, the Admin Logs, or the COOKUSR cookie. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bramdoessecurity.com/travianz-hacked/
CVE ID: CVE-2023-36998 State: PUBLISHED Published: 2025-01-22T00:00:00.000Z Last Updated: 2025-02-06T21:32:01.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NextEPC MME <= 1.0.1 (fixed in commit a8492c9c5bc0a66c6999cb5a263545b32a4109df) contains a stack-based buffer overflow vulnerability in the Emergency Number List decoding method. An attacker may send a NAS message containing an oversized Emergency Number List value to the MME to overwrite the stack with arbitrary bytes. An attacker with a cellphone connection to any base station managed by the MME may exploit this vulnerability without having to authenticate with the LTE core. Additional Analyst Notes: - CISA ADP Vul
ay exploit this vulnerability without having to authenticate with the LTE core. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://nextepc.com - https://cellularsecurity.org/ransacked
CVE ID: CVE-2023-37002 State: PUBLISHED Published: 2025-01-22T00:00:00.000Z Last Updated: 2025-01-28T21:06:38.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send an `E-RAB Modification Indication` message missing a required `MME_UE_S1AP_ID` field to repeatedly crash the MME, resulting in denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cellularsecurity.org/ransacked
CVE ID: CVE-2023-37003 State: PUBLISHED Published: 2025-01-22T00:00:00.000Z Last Updated: 2025-01-28T21:09:04.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send an `E-RAB Setup Response` message missing a required `MME_UE_S1AP_ID` field to repeatedly crash the MME, resulting in denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cellularsecurity.org/ransacked
CVE ID: CVE-2023-37004 State: PUBLISHED Published: 2025-01-22T00:00:00.000Z Last Updated: 2025-01-28T21:10:59.882Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send an `Initial Context Setup Response` message missing a required `MME_UE_S1AP_ID` field to repeatedly crash the MME, resulting in denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cellularsecurity.org/ransacked
CVE ID: CVE-2023-37005 State: PUBLISHED Published: 2025-01-22T00:00:00.000Z Last Updated: 2025-01-28T21:12:45.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send an `Initial Context Setup Failure` message missing a required `MME_UE_S1AP_ID` field to repeatedly crash the MME, resulting in denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cellularsecurity.org/ransacked
CVE ID: CVE-2023-37006 State: PUBLISHED Published: 2025-01-22T00:00:00.000Z Last Updated: 2025-01-28T21:13:35.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send a `Handover Request Ack` message missing a required `MME_UE_S1AP_ID` field to repeatedly crash the MME, resulting in denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cellularsecurity.org/ransacked
CVE ID: CVE-2023-37007 State: PUBLISHED Published: 2025-01-22T00:00:00.000Z Last Updated: 2025-01-28T21:14:18.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send a `Handover Cancel` message missing a required `MME_UE_S1AP_ID` field to repeatedly crash the MME, resulting in denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cellularsecurity.org/ransacked
CVE ID: CVE-2023-37008 State: PUBLISHED Published: 2025-01-22T00:00:00.000Z Last Updated: 2025-01-28T21:19:16.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open5GS MME versions <= 2.6.4 contain a buffer overflow in the ASN.1 deserialization function of the S1AP handler. This buffer overflow causes type confusion in decoded fields, leading to invalid parsing and freeing of memory. An attacker may use this to crash an MME or potentially execute code in certain circumstances. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cellularsecurity.org/ransacked
CVE ID: CVE-2023-37009 State: PUBLISHED Published: 2025-01-22T00:00:00.000Z Last Updated: 2025-01-27T21:43:27.824Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send a `Handover Notification` message missing a required `MME_UE_S1AP_ID` field to repeatedly crash the MME, resulting in denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cellularsecurity.org/ransacked
CVE ID: CVE-2023-37010 State: PUBLISHED Published: 2025-01-22T00:00:00.000Z Last Updated: 2025-01-27T21:41:28.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send an `eNB Status Transfer` message missing a required `MME_UE_S1AP_ID` field to repeatedly crash the MME, resulting in denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cellularsecurity.org/ransacked
CVE ID: CVE-2023-37011 State: PUBLISHED Published: 2025-01-22T00:00:00.000Z Last Updated: 2025-01-27T21:39:03.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send a `Handover Required` message missing a required `MME_UE_S1AP_ID` field to repeatedly crash the MME, resulting in denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cellularsecurity.org/ransacked
CVE ID: CVE-2023-37012 State: PUBLISHED Published: 2025-01-22T00:00:00.000Z Last Updated: 2025-01-27T20:48:25.780Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send an `Initial UE Message` message missing a required `PLMN Identity` field to repeatedly crash the MME, resulting in denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cellularsecurity.org/ransacked
CVE ID: CVE-2023-37013 State: PUBLISHED Published: 2025-01-22T00:00:00.000Z Last Updated: 2025-01-23T21:32:04.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open5GS MME versions <= 2.6.4 contains an assertion that can be remotely triggered via a sufficiently large ASN.1 packet over the S1AP interface. An attacker may repeatedly send such an oversized packet to cause the `ogs_sctp_recvmsg` routine to reach an unexpected network state and crash, leading to denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cellularsecurity.org/ransacked
CVE ID: CVE-2023-37014 State: PUBLISHED Published: 2025-01-22T00:00:00.000Z Last Updated: 2025-03-20T15:40:40.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open5GS MME versions <= 2.6.4 contains an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send a `UE Context Release Request` message missing a required `MME_UE_S1AP_ID` field to repeatedly crash the MME, resulting in denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cellularsecurity.org/ransacked
CVE ID: CVE-2023-37015 State: PUBLISHED Published: 2025-01-22T00:00:00.000Z Last Updated: 2025-02-06T21:30:34.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open5GS MME versions <= 2.6.4 contains an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send a `Path Switch Request` message missing a required `MME_UE_S1AP_ID` field to repeatedly crash the MME, resulting in denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cellularsecurity.org/ransacked
CVE ID: CVE-2023-37016 State: PUBLISHED Published: 2025-01-22T00:00:00.000Z Last Updated: 2025-02-06T21:30:29.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send a `UE Context Modification Response` message missing a required `MME_UE_S1AP_ID` field to repeatedly crash the MME, resulting in denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cellularsecurity.org/ransacked
CVE ID: CVE-2023-37017 State: PUBLISHED Published: 2025-01-22T00:00:00.000Z Last Updated: 2025-02-06T21:30:38.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send an `S1Setup Request` message missing a required `Global eNB ID` field to repeatedly crash the MME, resulting in denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cellularsecurity.org/ransacked
CVE ID: CVE-2023-37018 State: PUBLISHED Published: 2025-01-22T00:00:00.000Z Last Updated: 2025-02-06T21:30:42.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open5GS MME versions <= 2.6.4 contains an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send a `UE Capability Info Indication` message missing a required `MME_UE_S1AP_ID` field to repeatedly crash the MME, resulting in denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cellularsecurity.org/ransacked