CVE-2023-42358

CVSS 3.1 Score 7.7 of 10 (high)

Details

Published Jan 3, 2024
Updated: Jan 10, 2024
CWE ID 862

Summary

CVE-2023-42358 is a denial-of-service vulnerability affecting the O-RAN Software Community's ric-plt-e2mgr in the G-Release environment. A maliciously crafted request can be sent to the E2Manager API component, resulting in a disruption of services. Attackers can exploit this issue to cause network congestion or resource exhaustion, leading to a denial of service condition. The vulnerability poses a significant risk to networks utilizing the affected component, requiring immediate attention and patching.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share