← Back

CVE-2024-34048

nvd nist
Published: Apr 30, 2024Modified: May 27, 2025

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

O-RAN RIC I-Release e2mgr lacks array size checks in E2nodeConfigUpdateNotificationHandler.

Affected (1)

O Ran Sc
1 product
Ric Plt E2mgr
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Ric Plt E2mgr
Version 6.0.4

Related CWEs

CWE-129
Improper Validation of Array Index
The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.

References (4)

Source: cve@mitre.org
Patch
Source: cve@mitre.org
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link

Timeline

No history available yet.