CVE-2024-34036

Summary

An issue was discovered in O-RAN Near Realtime RIC I-Release. To exploit this vulnerability, an attacker can disrupt the initial connection between a gNB and the Near RT-RIC by inundating the system with a high volume of subscription requests via an xApp.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://jira.o-ran-sc.org/browse/RIC-1057
• https://gist.github.com/fklement/3a43dbb9fb361dddd8db7703080ade0f

• ←Previous
• Next→