Vulnerabilities

TI-2024-22511 CVE-2024-34048 · GHSA-2wvh-6639-8hph

O-RAN RIC I-Release e2mgr lacks array size checks in E2nodeConfigUpdateNotificationHandler.

MEDIUM 50

O-RAN RIC I-Release e2mgr lacks array size checks in E2nodeConfigUpdateNotificationHandler.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00578 Published 2024-04-29 No fix listed CWE-129

TI-2024-22510 CVE-2024-34047 · GHSA-qvgv-g72v-425q

O-RAN RIC I-Release e2mgr lacks array size checks in RicServiceUpdateHandler.

LOW 20

O-RAN RIC I-Release e2mgr lacks array size checks in RicServiceUpdateHandler.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00334 Published 2024-04-29 No fix listed CWE-129

TI-2023-22578 CVE-2023-42358 · GHSA-p632-fvpj-4vwp

An issue was discovered in O-RAN Software Community ric-plt-e2mgr in the G-Release…

HIGH 67

An issue was discovered in O-RAN Software Community ric-plt-e2mgr in the G-Release environment, allows remote attackers to cause a denial of service (DoS) via a crafted request to the E2Manager API component.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00551 Published 2024-01-03 No fix listed CWE-400

Vulnerabilities

Filters

O-RAN RIC I-Release e2mgr lacks array size checks in E2nodeConfigUpdateNotificationHandler.

O-RAN RIC I-Release e2mgr lacks array size checks in RicServiceUpdateHandler.

An issue was discovered in O-RAN Software Community ric-plt-e2mgr in the G-Release…