Ericsson Packet Core Controller Vulnerability Could Lead to Denial of Service
CVE-2024-25009

6.5MEDIUM

Key Information:

Vendor

Ericsson

Status
Packet Core Controller
Vendor
CVE Published:
20 August 2024

What is CVE-2024-25009?

Ericsson Packet Core Controller (PCC) contains a vulnerability in Access and Mobility Management Function (AMF) where improper input validation can lead to denial of service which may result in service degradation.

Affected Version(s)

Packet Core Controller 0 < 1.33

References

https://www.ericsson.com/en/about-us/security/psirt/secur...

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Radu Balaci and Meghna Patel of Bell Mobility (Canada)
Benoit Michau of P1 Security (France)
.
CVE-2024-25009 : Ericsson Packet Core Controller Vulnerability Could Lead to Denial of Service