HIGH🇵🇱 Wersja polska

CVE-2023-41627

CVSS 7.5v3.1pub. 2023-09-01upd. 2024-11-21

O-RAN Software Community ric-plt-lib-rmr v4.9.0 does not validate the source of the routing tables it receives, potentially allowing attackers to send forged routing tables to the device.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

  • O Ran Sc Ric Message Router

    APP
    O-Ran-Sc
    4.9.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2023-40997HIGH7.5ten sam produkt

Buffer Overflow vulnerability in O-RAN Software Community ric-plt-lib-rmr v.4.9.0 allows a remote attacker to ...

CVE-2023-40998HIGH7.5ten sam produkt

Buffer Overflow vulnerability in O-RAN Software Community ric-plt-lib-rmr v.4.9.0 allows a remote attacker to ...

CVE-2024-34048CRITICAL9.8PL ✓ten sam vendor

Brak weryfikacji rozmiaru tablicy w O-RAN SC e2mgr — RCE/uszkodzenie pamięci

CVE-2023-42358HIGH7.7ten sam vendor

An issue was discovered in O-RAN Software Community ric-plt-e2mgr in the G-Release environment, allows remote ...

CVE-2023-41628HIGH7.5ten sam vendor

An issue in O-RAN Software Community E2 G-Release allows attackers to cause a Denial of Service (DoS) by incor...