CVE-2024-24454

Summary

CVE-2024-24454 is a newly disclosed vulnerability affecting Athonet vEPC MME v11.4.0. This issue arises from an invalid memory access during processing of the ProtocolIE_ID field in E-RAB Modify Request messages. Malicious actors can exploit this vulnerability by sending crafted payloads, resulting in a Denial of Service (DoS) condition on cellular networks. The repeated initiation of connections triggers the memory access error, leading to network instability and potential disruptions. It is recommended that affected organizations apply the appropriate security patches to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.