CVE-2023-33100

Summary

CVE-2023-33100 refers to a transient Denial of Service (DoS) vulnerability affecting DL NAS (Downlink Non-Access Stratum) Transport messages in certain 3GPP (Third Generation Partnership Project) systems. The issue arises when message IDs that are not defined in the 3GPP specification are processed. Attackers can exploit this flaw by crafting malicious messages, leading to unintended behavior and potential DoS conditions. This vulnerability may impact critical telecommunications infrastructure, necessitating prompt patching and mitigation efforts.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.