Search Results (10 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-93307 1 O-ran-sc 1 Smo Oam 2026-09-17 4.3 Medium
A vulnerability has been found in O-RAN-SC SMO OAM 2025-06-10. Affected is an unknown function of the component VES Collector. Such manipulation of the argument additionalFields.padding leads to uncontrolled memory allocation. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through a bug report but has not responded yet.
CVE-2025-57446 1 O-ran-sc 1 Ric-plt-submgr 2026-04-15 7.5 High
An issue in O-RAN Near Realtime RIC ric-plt-submgr in the J-Release environment, allows remote attackers to cause a denial of service (DoS) via a crafted request to the Subscription Manager API component.
CVE-2024-34473 1 O-ran-sc 1 Near-rt Ric 2026-04-15 5.3 Medium
An issue was discovered in appmgr in O-RAN Near-RT RIC I-Release. An attacker could register an unintended RMR message type during xApp registration to disrupt other service components.
CVE-2023-42358 1 O-ran-sc 1 Ric-plt-e2mgr 2025-06-18 7.5 High
An issue was discovered in O-RAN Software Community ric-plt-e2mgr in the G-Release environment, allows remote attackers to cause a denial of service (DoS) via a crafted request to the E2Manager API component.
CVE-2024-34047 1 O-ran-sc 1 Ric-plt-e2mgr 2025-05-27 4.3 Medium
O-RAN RIC I-Release e2mgr lacks array size checks in RicServiceUpdateHandler.
CVE-2024-34048 1 O-ran-sc 1 Ric-plt-e2mgr 2025-05-27 9.8 Critical
O-RAN RIC I-Release e2mgr lacks array size checks in E2nodeConfigUpdateNotificationHandler.
CVE-2023-41628 1 O-ran-sc 1 E2 2024-11-21 7.5 High
An issue in O-RAN Software Community E2 G-Release allows attackers to cause a Denial of Service (DoS) by incorrectly initiating the messaging procedure between the E2Node and E2Term components.
CVE-2023-41627 1 O-ran-sc 1 Ric Message Router 2024-11-21 7.5 High
O-RAN Software Community ric-plt-lib-rmr v4.9.0 does not validate the source of the routing tables it receives, potentially allowing attackers to send forged routing tables to the device.
CVE-2023-40998 1 O-ran-sc 1 Ric Message Router 2024-11-21 7.5 High
Buffer Overflow vulnerability in O-RAN Software Community ric-plt-lib-rmr v.4.9.0 allows a remote attacker to cause a denial of service via the packet size component.
CVE-2023-40997 1 O-ran-sc 1 Ric Message Router 2024-11-21 7.5 High
Buffer Overflow vulnerability in O-RAN Software Community ric-plt-lib-rmr v.4.9.0 allows a remote attacker to cause a denial of service via a crafted packet.