PT-2025-1430 · Magma · Magma

Published 2025-01-21 · Updated 2025-01-22 · CVE-2023-37038

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Magma versions 1.8.0 and earlier

Description A null pointer dereference issue in the Mobile Management Entity (MME) allows network-adjacent attackers to crash the MME via an S1AP "Uplink NAS Transport" packet missing an expected MME UE S1AP ID field. This issue can be exploited by sending a specially crafted packet, which can cause the MME to crash.

Recommendations For Magma versions 1.8.0 and earlier, update to version 1.9 or later, which includes the fix for this issue, as committed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486. As a temporary workaround, consider implementing packet filtering to restrict S1AP "Uplink NAS Transport" packets missing the MME UE S1AP ID field.

Exploit

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2023-37038

Affected Products

Magma

References · 4

• 🔥 https://cellularsecurity.org/ransacked · Exploit
• https://osv.dev/vulnerability/CVE-2023-37038 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-37038 · Security Note
• https://twitter.com/CVEnew/status/1881933342355951982 · Twitter Post