Cyber Posture

CVE-2023-37024

HighPublic PoC

Published: 21 January 2025

Published
21 January 2025
Modified
03 March 2025
KEV Added
Patch
CVSS Score 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score 0.0044 63.4th percentile
Risk Priority 15 60% EPSS · 20% KEV · 20% CVSS

Description

A reachable assertion in the Mobile Management Entity (MME) of Magma versions <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows remote attackers to crash the MME with an unauthenticated cellphone by sending a NAS packet containing an `Emergency Number List` Information Element.

Security Summary

CVE-2023-37024 is a reachable assertion vulnerability (CWE-617) in the Mobile Management Entity (MME) component of Magma versions up to and including 1.8.0. The flaw allows remote attackers to trigger an assertion failure by sending a Non-Access Stratum (NAS) packet containing an Emergency Number List Information Element. The vulnerability has a CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) and was published on 2025-01-21.

Any remote attacker with access to send NAS packets can exploit this vulnerability using an unauthenticated cellphone, requiring no privileges, user interaction, or special conditions due to its low attack complexity and network accessibility. Successful exploitation crashes the MME, resulting in a denial-of-service condition that disrupts mobile network management functions without impacting confidentiality or integrity.

The vulnerability is fixed in Magma v1.9 at commit 08472ba98b8321f802e95f5622fa90fec2dea486. Additional details on mitigation are available in the advisory at https://cellularsecurity.org/ransacked.

Details

CWE(s)
CWE-617

Affected Products

linuxfoundation
magma
≤ 1.9

References