Denial of Service Vulnerability in O-RAN Software Community E2 G-Release
CVE-2023-41628

7.5HIGH

Key Information:

Vendor

O-ran-sc

Status
E2
Vendor
CVE Published:
1 September 2023

What is CVE-2023-41628?

An issue within the O-RAN Software Community's E2 G-Release enables attackers to trigger a Denial of Service (DoS) condition. This occurs through the improper initiation of messaging procedures between the E2Node and E2Term components, which can disrupt the network operations relying on these interactions. This vulnerability poses a risk to the stability and availability of networks that utilize this software, highlighting the need for prompt mitigation and awareness.

References

https://jira.o-ran-sc.org/browse/RIC-1002

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.