Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The NextEPC MME <= 1.0.1 (fixed in commit a8492c9c5bc0a66c6999cb5a263545b32a4109df) contains a stack-based buffer overflow vulnerability in the Emergency Number List decoding method. An attacker may send a NAS message containing an oversized Emergency Number List value to the MME to overwrite the stack with arbitrary bytes. An attacker with a cellphone connection to any base station managed by the MME may exploit this vulnerability without having to authenticate with the LTE core.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
NextEPC MME 安全漏洞
Vulnerability Description
NextEPC MME是NextEPC公司的一个 4G/5G 3GPP 核心网络的开源实施。 NextEPC MME 1.0.1及之前版本存在安全漏洞，该漏洞源于Emergency Number List解码中存在堆缓冲区溢出，攻击者可通过发送特制的NAS消息覆盖堆栈。
CVSS Information
N/A
Vulnerability Type
N/A