cve.bz

CVE-2024-24458

5.9 mediumEPSS 0.4%

Medium (5.9). EPSS 0.4% chance of exploitation in the next 30 days.

An invalid memory access when handling the ENB Configuration Transfer messages containing invalid PLMN Identities in Athonet vEPC MME v11.4.0 allows attackers to cause a Denial of Service (DoS) to the cellular network by repeatedly initiating connections and sending a crafted payload.

Severity

CVSS 3.1

5.9 medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.4% chance of exploitation in the next 30 days; higher than 29% of CVEs (scores of 2026-11-01)
CWE
CWE-125
Published
Modified
Record from
the NVD, synced

References

Check your stackJSON