cnvd - cnvd-2023-76460

cnvd-2023-76460

Vulnerability from cnvd

Title: Open5GS访问控制错误漏洞

Description:

Open5GS是一个5G Core和Epc的C语言开源实现，即Lte/Nr网络的核心网络。

Open5GS 2.4.10及之前版本存在访问控制错误漏洞，该漏洞源于缺乏身份验证，攻击者可利用该漏洞向Open5GS端点发送HTTP请求，并检索存储在设备上的信息。

Severity: 高

Formal description:

目前没有详细解决方案提供： https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-open5gs

Reference: https://nvd.nist.gov/vuln/detail/CVE-2023-4884

Impacted products

Name
Open5GS Open5GS <=2.4.10

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2023-4884",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2023-4884"
    }
  },
  "description": "Open5GS\u662f\u4e00\u4e2a5G Core\u548cEpc\u7684C\u8bed\u8a00\u5f00\u6e90\u5b9e\u73b0\uff0c\u5373Lte/Nr\u7f51\u7edc\u7684\u6838\u5fc3\u7f51\u7edc\u3002\n\nOpen5GS 2.4.10\u53ca\u4e4b\u524d\u7248\u672c\u5b58\u5728\u8bbf\u95ee\u63a7\u5236\u9519\u8bef\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7f3a\u4e4f\u8eab\u4efd\u9a8c\u8bc1\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5411Open5GS\u7aef\u70b9\u53d1\u9001HTTP\u8bf7\u6c42\uff0c\u5e76\u68c0\u7d22\u5b58\u50a8\u5728\u8bbe\u5907\u4e0a\u7684\u4fe1\u606f\u3002",
  "formalWay": "\u76ee\u524d\u6ca1\u6709\u8be6\u7ec6\u89e3\u51b3\u65b9\u6848\u63d0\u4f9b\uff1a\r\nhttps://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-open5gs",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2023-76460",
  "openTime": "2023-10-13",
  "products": {
    "product": "Open5GS Open5GS \u003c=2.4.10"
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2023-4884",
  "serverity": "\u9ad8",
  "submitTime": "2023-10-11",
  "title": "Open5GS\u8bbf\u95ee\u63a7\u5236\u9519\u8bef\u6f0f\u6d1e"
}

CVE-2023-4884 (GCVE-0-2023-4884)

Vulnerability from cvelistv5

Published

2023-10-03 14:46

Modified

2024-09-19 19:55

Severity ?

6.5 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

CWE

CWE-306 - Missing Authentication for Critical Function

Summary

An attacker could send an HTTP request to an Open5GS endpoint and retrieve the information stored on the device due to the lack of Authentication.

References

▼	URL	Tags
	https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-open5gs

Impacted products

	Vendor	Product	Version
	Open5GS	Open5GS	Version: 2.4.10 and prior

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T07:38:01.041Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-open5gs"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-4884",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-19T19:55:38.993959Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-19T19:55:50.558Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Open5GS",
          "vendor": "Open5GS",
          "versions": [
            {
              "status": "affected",
              "version": "2.4.10 and prior"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Pablo Valle Alvear"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "An attacker could send an HTTP request to an Open5GS endpoint and retrieve the information stored on the device due to the lack of Authentication."
            }
          ],
          "value": "An attacker could send an HTTP request to an Open5GS endpoint and retrieve the information stored on the device due to the lack of Authentication."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-12",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-12 Choosing Message Identifier"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-306",
              "description": "CWE-306 Missing Authentication for Critical Function",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-10-03T14:46:57.814Z",
        "orgId": "0cbda920-cd7f-484a-8e76-bf7f4b7f4516",
        "shortName": "INCIBE"
      },
      "references": [
        {
          "url": "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-open5gs"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Open5GS is working on a fix for the reported vulnerabilities."
            }
          ],
          "value": "Open5GS is working on a fix for the reported vulnerabilities."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Multiple vulnerabilities in Open5GS",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "0cbda920-cd7f-484a-8e76-bf7f4b7f4516",
    "assignerShortName": "INCIBE",
    "cveId": "CVE-2023-4884",
    "datePublished": "2023-10-03T14:46:57.814Z",
    "dateReserved": "2023-09-11T09:31:24.278Z",
    "dateUpdated": "2024-09-19T19:55:50.558Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted