cve/2024/CVE-2024-24455.md

CVE-2024-24455

Description

An invalid memory access when handling a UE Context Release message containing an invalid UE identifier in Athonet vEPC MME v11.4.0 allows attackers to cause a Denial of Service (DoS) to the cellular network by repeatedly initiating connections and sending a crafted payload.

POC

Reference

• https://cellularsecurity.org/ransacked

Github

No PoCs found on GitHub currently.