CVE-2024-24456

Summary

CVE-2024-24456 is a newly disclosed vulnerability affecting the Athonet MME (Mobile Management Entity). An incorrectly formatted E-RAB Release Command packet, which includes a malformed NAS PDU (Network Access Server Protocol Data Unit), can trigger a buffer overflow, leading to an immediate crash of the Athonet MME. Successful exploitation of this vulnerability could potentially allow an attacker to disrupt services or gain unauthorized access to the network. This issue poses a significant risk to organizations utilizing Athonet MME in their networks and necessitates prompt patching to mitigate the threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.