CVE-2024-20004
CVE-2024-20004
In short
A flaw in Modem NL1 allows attackers to crash the system by sending a malformed network message, causing the device to stop working temporarily without needing special access.
Technical detail
Improper input validation in Modem NL1's handling of NR RRC Connection Setup messages allows an unauthenticated remote attacker to trigger a denial of service condition via crafted network traffic. No elevated privileges or user interaction required; exploitation occurs at the network protocol layer.
Summary generated and translated by AI from the official description.
In Modem NL1, there is a possible system crash due to an improper input validation. This could lead to remote denial of service, if NW sent invalid NR RRC Connection Setup message, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01191612; Issue ID: MOLY01195812 (MSV-985).
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →