CVE-2023-33095

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Mar 4, 2024
Updated: Jan 10, 2025
CWE ID 617

Summary

CVE-2023-33095 is a transient Denial of Service (DoS) vulnerability affecting the DL NAS transport OTA process in NR networks. Maliciously crafted payload containers with incorrect container lengths can trigger this issue. The vulnerability arises when the system fails to properly validate and process these containers, resulting in a DoS condition. Unauthorized users may exploit this flaw to cause disruptions in network services, potentially leading to operational downtime. It is crucial for affected organizations to apply the necessary patches or mitigations as soon as possible to protect their networks from potential attacks.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share