CVE-2023-33095
CVSS 3.1 Score 7.5 of 10 (high)
Details
Summary
CVE-2023-33095 is a transient Denial of Service (DoS) vulnerability affecting the DL NAS transport OTA process in NR networks. Maliciously crafted payload containers with incorrect container lengths can trigger this issue. The vulnerability arises when the system fails to properly validate and process these containers, resulting in a DoS condition. Unauthorized users may exploit this flaw to cause disruptions in network services, potentially leading to operational downtime. It is crucial for affected organizations to apply the necessary patches or mitigations as soon as possible to protect their networks from potential attacks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Qualcomm Incorporated