PT-2025-1254 · Nextepc · Nextepc Mme

Published 2025-01-22 · Updated 2025-01-23 · CVE-2023-36998

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NextEPC MME version 1.0.1 and earlier

Description The issue concerns a stack-based buffer overflow vulnerability in the Emergency Number List decoding method. An attacker can exploit this by sending a NAS message with an oversized Emergency Number List value to the MME, allowing them to overwrite the stack with arbitrary bytes. This can be done without authenticating with the LTE core, provided the attacker has a connection to any base station managed by the MME.

Recommendations For NextEPC MME version 1.0.1 and earlier, update to a version that includes the fix committed in a8492c9c5bc0a66c6999cb5a263545b32a4109df to resolve the issue. As a temporary workaround, consider restricting access to the NAS message handling functionality to minimize the risk of exploitation.

Fix

Stack Overflow

Buffer Overflow

Weakness Enumeration

CWE-121

CWE-119

Related Identifiers

BDU:2025-00659

CVE-2023-36998

Affected Products

Nextepc Mme

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2023-36998 · Security Note
• https://bdu.fstec.ru/vul/2025-00659 · Security Note
• https://github.com/nextepc/nextepc/commit/a8492c9c5bc0a66c6999cb5a263545b32a4109df · Note
• https://cellularsecurity.org/ransacked · Note
• https://twitter.com/CVEnew/status/1882300200426885420 · Twitter Post
• http://nextepc.com · Note