Vulnerabilities in ellanetworks
14 resultsVexday analysis
A Ella Networks possui 14 vulnerabilidades registradas na base, com 3 divulgadas nos últimos 90 dias, mas nenhuma sob ataque ativo (KEV) ou classificada como crítica. A fraqueza predominante é a dereferência de ponteiro nulo (CWE-476), típica de falhas de validação de entrada, sugerindo um risco moderado e controlável se os patches forem aplicados regularmente.
CVE-2026-33282HIGHElla Core panics on malformed NGAP Location ReportEPSS 0.4%CVE-2026-33281MEDIUMElla Core panics on invalid PDU Session IDs in NGAP messagesEPSS 0.4%CVE-2026-33906HIGHElla Core has Privilege Escalation via Database Restore by NetworkManager roleEPSS 0.4%CVE-2026-33283MEDIUMElla Core panics on malformed ULNASTransport Message without a Request TypeEPSS 0.4%CVE-2026-34761MEDIUMElla Core Panics Upon NGAP handover failureEPSS 0.3%CVE-2026-32319HIGHElla Core: Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payloadEPSS 0.3%CVE-2026-33907MEDIUMElla Core Panics during NAS Authentication Response/Failure with missing IEsEPSS 0.2%CVE-2026-33903MEDIUMElla Core panics when processing a crafted NGAP LocationReport messageEPSS 0.2%CVE-2026-34762LOWElla Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriberEPSS 0.2%CVE-2026-32320MEDIUMElla Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstringsEPSS 0.2%CVE-2026-44473HIGHElla Core: UE Downlink Redirection via Forged PDUSessionResourceSetupResponseEPSS 0.2%CVE-2026-33904MEDIUMElla Core has a Denial of Service via SCTP connection cleanup deadlockEPSS 0.2%CVE-2026-44475MEDIUMElla Core: UE Security Capability bypass on NGAP PathSwitchRequestEPSS 0.1%CVE-2026-44474LOWElla Core: Handover failures during concurrent Security Mode CommandEPSS 0.1%