CVE-2023-33100CWE-20

Improper input validation in Multi-Mode Call Processor

High · published April 1, 2024

CVSS v3.1
7.5
EPSS
0%
Percentile
24.3
In the wild
Unconfirmed
What it is

Transient DOS while processing DL NAS Transport message when message ID is not defined in the 3GPP specification.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00324 · 24.3th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2024-04-01T15:05Z
EPSS history
Timeline
  • 01 APR 15:05Z
    Improper input validation in Multi-Mode Call Processor
    cvelistv5