CVE-2024-43656
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Jan 9, 2025
CWE ID 78
CWE ID 434
Summary
CVE-2024-20154 is a newly disclosed vulnerability affecting Modem software. This issue involves a missing bounds check that can lead to an out-of-bounds write event. An attacker who controls a rogue base station can exploit this flaw to execute remote code on a UE (User Equipment) that has connected to it, without requiring additional execution privileges or user interaction. The vulnerability carries a high severity level, and patch MOLY00720348, as well as issue ID MSV-2392, have been released to address it.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.