CVE-2024-24457

Name of the Vulnerable Software and Affected Versions Athonet vEPC MME version 11.4.0

Description The issue is related to an invalid memory access when handling the ProtocolIE ID field of E-RAB Setup List Context SURes messages. This allows attackers to cause a Denial of Service (DoS) to the cellular network by repeatedly initiating connections and sending a crafted payload.

Recommendations For Athonet vEPC MME version 11.4.0, update to a version that fixes the invalid memory access issue to prevent Denial of Service (DoS) attacks. As a temporary workaround, consider restricting the handling of E-RAB Setup List Context SURes messages to minimize the risk of exploitation.