CVE-2024-38404

Summary

CVE-2024-38404 is a transient Denial of Service (DoS) vulnerability affecting modems. The issue arises when the registration acceptance Over-the-Air (OTA) process receives incorrect ciphering key data in the IE (Information Element) of the packet. This error results in a DoS condition, causing the modem to become unresponsive and unable to process legitimate requests, leading to a disruption in network services.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.