O-RAN-SC

Records11All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

O-RAN-SC records in CISA KEV

No O-RAN-SC vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ric-plt-e2mgr 3 records HIGH Ric Message Router 3 records LOW E2 1 record HIGH

Records

11 records

TI-2023-22061 CVE-2023-41628 · GHSA-pcpj-mqg2-h82j

An issue in O-RAN Software Community E2 G-Release allows attackers to cause a Denial of…

HIGH 72

An issue in O-RAN Software Community E2 G-Release allows attackers to cause a Denial of Service (DoS) by incorrectly initiating the messaging procedure between the E2Node and E2Term components.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01945 Published 2023-09-01 No fix listed

TI-2026-62921 CVE-2026-93310 · GHSA-9qfw-v8ph-47fv

O-RAN-SC SMO OAM VES Collector allocation of resources

HIGH 70

A vulnerability was identified in O-RAN-SC SMO OAM 2025-06-10.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00701 Published 2026-09-18 No fix listed CWE-400

TI-2023-22578 CVE-2023-42358 · GHSA-p632-fvpj-4vwp

An issue was discovered in O-RAN Software Community ric-plt-e2mgr in the G-Release…

HIGH 67

An issue was discovered in O-RAN Software Community ric-plt-e2mgr in the G-Release environment, allows remote attackers to cause a denial of service (DoS) via a crafted request to the E2Manager API component.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00551 Published 2024-01-03 No fix listed CWE-400

TI-2026-62920 CVE-2026-93309 · GHSA-g5x6-j98r-mr3c

O-RAN-SC SMO OAM VES Collector allocation of resources

MEDIUM 57

A vulnerability was determined in O-RAN-SC SMO OAM 2025-06-10.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00521 Published 2026-09-17 No fix listed CWE-400

TI-2026-62919 CVE-2026-93308 · GHSA-2cqp-2399-xgc5

O-RAN-SC SMO OAM VES Collector allocation of resources

MEDIUM 57

A vulnerability was found in O-RAN-SC SMO OAM 2025-06-10.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00521 Published 2026-09-17 No fix listed CWE-400

TI-2026-62918 CVE-2026-93307 · GHSA-g643-hjfx-77g7

O-RAN-SC SMO OAM VES Collector memory allocation

MEDIUM 57

A vulnerability has been found in O-RAN-SC SMO OAM 2025-06-10.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00533 Published 2026-09-17 No fix listed CWE-400

TI-2024-22511 CVE-2024-34048 · GHSA-2wvh-6639-8hph

O-RAN RIC I-Release e2mgr lacks array size checks in E2nodeConfigUpdateNotificationHandler.

MEDIUM 50

O-RAN RIC I-Release e2mgr lacks array size checks in E2nodeConfigUpdateNotificationHandler.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00578 Published 2024-04-29 No fix listed CWE-129

TI-2023-21644 CVE-2023-40998 · GHSA-36rc-cq5x-rrpx

Buffer Overflow vulnerability in O-RAN Software Community ric-plt-lib-rmr v.4.9.0 allows…

LOW 37

Buffer Overflow vulnerability in O-RAN Software Community ric-plt-lib-rmr v.4.9.0 allows a remote attacker to cause a denial of service via the packet size component.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02117 Published 2023-08-28 No fix listed CWE-120

TI-2023-21643 CVE-2023-40997 · GHSA-36gh-r3cw-vgj5

Buffer Overflow vulnerability in O-RAN Software Community ric-plt-lib-rmr v.4.9.0 allows…

LOW 37

Buffer Overflow vulnerability in O-RAN Software Community ric-plt-lib-rmr v.4.9.0 allows a remote attacker to cause a denial of service via a crafted packet.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02234 Published 2023-08-28 No fix listed CWE-120

TI-2023-22060 CVE-2023-41627 · GHSA-v8jr-vfpx-7982

O-RAN Software Community ric-plt-lib-rmr v4.9.0 does not validate the source of the…

LOW 36

O-RAN Software Community ric-plt-lib-rmr v4.9.0 does not validate the source of the routing tables it receives, potentially allowing attackers to send forged routing tables to the device.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01437 Published 2023-09-01 No fix listed

TI-2024-22510 CVE-2024-34047 · GHSA-qvgv-g72v-425q

O-RAN RIC I-Release e2mgr lacks array size checks in RicServiceUpdateHandler.

LOW 20

O-RAN RIC I-Release e2mgr lacks array size checks in RicServiceUpdateHandler.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00334 Published 2024-04-29 No fix listed CWE-129

Open these records in search →

Critical	1
High	5
Medium	5
Low	0
No CVSS	0