CVE-2024-20003

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Feb 5, 2024
Updated: Jul 3, 2024
CWE ID 20

Summary

CVE-2024-20003 is a vulnerability affecting Modem NL1 that could cause a system crash due to insufficient input validation. An attacker could potentially trigger this issue by sending an invalid NR RRC Connection Setup message to the affected device, leading to a remote denial of service. No user interaction is required for exploitation, and the vulnerability does not grant any additional execution privileges. The patch ID for addressing this issue is MOLY01191612, with a corresponding MSV-981 identifier.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share