CVE-2024-24453

Name of the Vulnerable Software and Affected Versions Athonet vEPC MME version 11.4.0

Description The issue is caused by an invalid memory access when handling the ProtocolIE ID field of E-RAB NotToBeModifiedBearerModInd information element. This allows attackers to cause a Denial of Service (DoS) to the cellular network by repeatedly initiating connections and sending a crafted payload.

Recommendations For Athonet vEPC MME version 11.4.0, update to a version that fixes the invalid memory access issue to prevent Denial of Service (DoS) attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.