Cisco Mobility Management Entity Denial of Service Vulnerability

A vulnerability in the implementation of the Stream Control Transmission Protocol (SCTP) on Cisco Mobility Management Entity (MME) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an eNodeB that is connected to an affected device. The vulnerability is due to insufficient input validation of SCTP traffic. An attacker could exploit this vulnerability by leveraging a man-in-the-middle position between the eNodeB and the MME and then sending a crafted SCTP message to the MME. A successful exploit would cause the MME to stop sending SCTP messages to the eNodeB, triggering a DoS condition.

N/A

输入验证不恰当

Cisco Mobility Management Entity 输入验证错误漏洞

Cisco Mobility Management Entity（Cisco MME）是美国Firepower 4100 Series Next-Generation Firewalls（Cisco）公司的一个移动管理实体。思科移动管理实体（MME）对于4G移动核心网络（称为演进的分组核心（EPC））的网络功能至关重要。MME驻留在EPC控制平面中，并管理会话状态，身份验证，寻呼，与3GPP，2G和3G节点的移动性，漫游以及其他承载管理功能。 Cisco Mobility Management Entit

N/A

N/A