PT-2025-1423 · Magma · Magma

Published 2025-01-21 · Updated 2025-01-22 · CVE-2023-37031

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Magma versions 1.8.0 and earlier

Description A null pointer dereference issue in the Mobile Management Entity (MME) allows network-adjacent attackers to crash the MME via an S1AP "eNB Configuration Transfer" packet missing its required Target eNB ID field.

Recommendations For Magma versions 1.8.0 and earlier, update to version 1.9 or later, specifically ensuring the inclusion of commit 08472ba98b8321f802e95f5622fa90fec2dea486, to resolve the issue. As a temporary workaround, consider restricting access to the S1AP "eNB Configuration Transfer" packet to minimize the risk of exploitation.

Exploit

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2023-37031

Affected Products

Magma

References · 4

• 🔥 https://cellularsecurity.org/ransacked · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-37031 · Security Note
• https://osv.dev/vulnerability/CVE-2023-37031 · Vendor Advisory
• https://twitter.com/CVEnew/status/1881933336047665304 · Twitter Post