CVE-2024-24459

An invalid memory access when handling the ProtocolIE_ID field of S1Setup Request messages in Athonet vEPC MME v11.4.0 allows attackers to cause a Denial of Service (DoS) to the cellular network by repeatedly initiating connections and sending a crafted payload.

Score

CVSS 3.1 5.9 Medium

Status

Deferred - security-alert@hpe.com

Published

2024-11-15

Last modified

2025-08-26

Weaknesses

CWE-125

Affected products

• Hpe Athonet Core (Hewlett Packard Enterprise Hpe)

References

• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04780en_us&docLocale=en_US