CVE-2024-20154
CVSS 3.1 Score 8.1 of 10 (high)
Details
Published Jan 6, 2025
CWE ID 121
Summary
CVE-2024-20154 is a newly disclosed vulnerability in Modem software. This issue involves a missing bounds check leading to an out-of-bounds write. An attacker could potentially exploit this vulnerability by setting up a rogue base station and enticing a UE to connect. Once connected, the attacker could execute remote code without requiring any additional privileges or user interaction. The patch ID for this issue is MOLY00720348, and it is identified as MSV-2392.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.