PatchTheCVEo-ran-sc vulnerabilities
Recent CVEs affecting o-ran-sc products. 7 tracked.
o-ran-sc has 7 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2024-04-30. Highest priority: CVE-2023-40998 (score 57/100).
- CVE-2024-34048 CRITICAL 9.8 DOWNGRADE O-RAN RIC I-Release e2mgr lacks array size checks in E2nodeConfigUpdateNotificationHandler.
- CVE-2024-34047 MEDIUM 4.3 MITIGATE O-RAN RIC I-Release e2mgr lacks array size checks in RicServiceUpdateHandler.
- CVE-2023-42358 HIGH 7.7 MITIGATE An issue was discovered in O-RAN Software Community ric-plt-e2mgr in the G-Release environment, allows remote
- CVE-2023-41628 HIGH 7.5 DOWNGRADE An issue in O-RAN Software Community E2 G-Release allows attackers to cause a Denial of Service (DoS) by incor
- CVE-2023-41627 HIGH 7.5 DOWNGRADE O-RAN Software Community ric-plt-lib-rmr v4.9.0 does not validate the source of the routing tables it receives
- CVE-2023-40998 HIGH 7.5 DOWNGRADE Buffer Overflow vulnerability in O-RAN Software Community ric-plt-lib-rmr v.4.9.0 allows a remote attacker to
- CVE-2023-40997 HIGH 7.5 DOWNGRADE Buffer Overflow vulnerability in O-RAN Software Community ric-plt-lib-rmr v.4.9.0 allows a remote attacker to
FAQ
How do I fix o-ran-sc vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is o-ran-sc being exploited right now?
None of the tracked o-ran-sc CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which o-ran-sc CVE should I patch first?
CVE-2023-40998 currently ranks highest (57/100): Buffer Overflow vulnerability in O-RAN Software Community ric-plt-lib-rmr v.4.9.0 allows a remote attacker to .