CVE-2023-33096

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Mar 4, 2024
Updated: Jan 10, 2025
CWE ID 617

Summary

CVE-2023-33096 is a newly identified vulnerability that exposes Transient Denial of Service (DoS) risks when processing DL NAS Transport messages, in accordance with the 3GPP 24.501 v16 standard. The issue arises due to a flaw in handling the messages, leading to potential overload and interruption of network services. This vulnerability can be exploited by malicious actors to disrupt communication channels and cause service outages. It is crucial for affected organizations to apply the relevant patches promptly to mitigate the risks and prevent potential disruptions.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share