CVE-2023-4884CWE-306
Multiple vulnerabilities in Open5GS
Medium · published October 3, 2023
What it is
An attacker could send an HTTP request to an Open5GS endpoint and retrieve the information stored on the device due to the lack of Authentication.
The record
Technical detail
- CVSS v3.1
- 6.5 · MEDIUM
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
- CVSS v4.0
- Not supplied
- EPSS
- 0.00511 · 42.7th percentile
- Weakness
- CWE-306 · Missing Authentication for Critical Function
- Published
- 2023-10-03T14:46Z
EPSS history
Timeline