ric-plt-e2mgr vulnerabilities and fixes

Recent CVEs affecting ric-plt-e2mgr, with upgrade or downgrade steps. 3 tracked.

Also searched as: ric plt e2mgr.

ric-plt-e2mgr has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2024-04-30. Highest priority: CVE-2024-34048 (score 51/100).

• CVE-2024-34048 CRITICAL 9.8 DOWNGRADE O-RAN RIC I-Release e2mgr lacks array size checks in E2nodeConfigUpdateNotificationHandler.
• CVE-2024-34047 MEDIUM 4.3 MITIGATE O-RAN RIC I-Release e2mgr lacks array size checks in RicServiceUpdateHandler.
• CVE-2023-42358 HIGH 7.7 MITIGATE An issue was discovered in O-RAN Software Community ric-plt-e2mgr in the G-Release environment, allows remote

FAQ

How do I fix ric-plt-e2mgr vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is ric-plt-e2mgr being exploited right now?

None of the tracked ric-plt-e2mgr CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which ric-plt-e2mgr CVE should I patch first?

CVE-2024-34048 currently ranks highest (51/100): O-RAN RIC I-Release e2mgr lacks array size checks in E2nodeConfigUpdateNotificationHandler..

RSS feed for ric-plt-e2mgr · ← Back to latest CVEs