CVE-2023-37024
Published: 21 January 2025
Description
A reachable assertion in the Mobile Management Entity (MME) of Magma versions <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows remote attackers to crash the MME with an unauthenticated cellphone by sending a NAS packet containing an `Emergency Number List` Information Element.
Security Summary
CVE-2023-37024 is a reachable assertion vulnerability (CWE-617) in the Mobile Management Entity (MME) component of Magma versions up to and including 1.8.0. The flaw allows remote attackers to trigger an assertion failure by sending a Non-Access Stratum (NAS) packet containing an Emergency Number List Information Element. The vulnerability has a CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) and was published on 2025-01-21.
Any remote attacker with access to send NAS packets can exploit this vulnerability using an unauthenticated cellphone, requiring no privileges, user interaction, or special conditions due to its low attack complexity and network accessibility. Successful exploitation crashes the MME, resulting in a denial-of-service condition that disrupts mobile network management functions without impacting confidentiality or integrity.
The vulnerability is fixed in Magma v1.9 at commit 08472ba98b8321f802e95f5622fa90fec2dea486. Additional details on mitigation are available in the advisory at https://cellularsecurity.org/ransacked.
Details
- CWE(s)