OpenAirInterface v2.2.0 accepts Security Mode Complete without any integrity protection.
OpenAirInterface v2.2.0 accepts Security Mode Complete without any integrity protection.
No Openairinterface vulnerabilities are listed in CISA KEV.
6 records in Oai-cn5g-amf · all components
OpenAirInterface v2.2.0 accepts Security Mode Complete without any integrity protection.
OpenAirInterface V2.2.0 AMF crashes when it receives an NGAP message with invalid procedure code or invalid PDU-type.
OpenAirInterface Version 2.2.0 has a Buffer Overflow vulnerability in processing UplinkNASTransport containing Authentication Response containing a NAS PDU with oversize response (For example 100 byte).
OpenAirInterface CN5G AMF<=v2.0.1 There is a logical error when processing JSON format requests.
OpenAirInterface CN5G AMF<=v2.1.9 has a buffer overflow vulnerability in processing NAS messages.
In OpenAirInterface V2.2.0 AMF, Out of sequence messages causes incorrect state transition during UE registration procedure.