CVE-2023-37023
Open5GS MME versions <= 2.6.4 contain a reachable assertion in the `Uplink NAS Transport` packet handler. A packet missing its `MME_UE_S1AP_ID` field causes Open5gs to crash; an attacker may repeatedly send such packets to cause denial of service.
- Affected products
- Open5Gs
- open5gs
- ≤ 2.6.4
- Fix
- Available
- CVSS 3.1
- 8.6 HIGH
- EPSS
- 0.8% (52th percentile)
- Weakness
- CWE-617
- NVD status
- Analyzed
- Published
- 2025-01-22
CVE-2023-37023 at NVD
No indexed exploits for CVE-2023-37023 yet
Our index is partial: it proves presence, never absence
No exploit for CVE-2023-37023 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.