New MCP server — Bring vulnerability intelligence into your AI
Back to feed

CVE-2024-34476

NVDCIRCLENISA

EUVD-2024-34825 · Published May 5, 2024

Open5GS before 2.7.1 is vulnerable to a reachable assertion that can cause an AMF crash via NAS messages from a UE: ogs_nas_encrypt in lib/nas/common/security.c for pkbuf->len.

Technologies

Open5Gs Open5Gs

Weaknesses

CWE-805

CVSS scores

  • v3.15.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

Initial Access

References

Potentially impacted assets

See if this affects your attack surface

Take 15 minutes to discover our platform with our experts

PatrowlIntel platform screenshot