« Volver al listado

CVE-2024-25009

Estado: AplazadaMedia (6.5)—

Ericsson Packet Core Controller (PCC) contains a vulnerability in Access and Mobility Management Function (AMF) where improper input validation can lead to denial of service which may result in service degradation.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Ericsson — Access AND Mobility Management FunctionAIEricsson — Packet Core ControllerAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-25009",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-25009",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-08-20T13:58:33.611762Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "85b1779b-6ecd-4f52-bcc5-73eac4659dcf",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.5,
          "attackVector": "ADJACENT_NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "85b1779b-6ecd-4f52-bcc5-73eac4659dcf",
      "affectedData": [
        {
          "vendor": "Ericsson",
          "product": "Packet Core Controller",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "1.33",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2024-08-20T12:15:04.667",
  "references": [
    {
      "url": "https://www.ericsson.com/en/about-us/security/psirt/security-bulletin-ericsson-packet-core-controller-pcc-august-2024",
      "source": "85b1779b-6ecd-4f52-bcc5-73eac4659dcf"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "85b1779b-6ecd-4f52-bcc5-73eac4659dcf",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Ericsson Packet Core Controller (PCC) contains a vulnerability in Access and Mobility Management Function (AMF) where improper input validation can lead to denial of service which may result in service degradation."
    },
    {
      "lang": "es",
      "value": "Ericsson Packet Core Controller (PCC) contiene una vulnerabilidad en Access and Mobility Management Function (AMF) donde una validación de entrada incorrecta puede provocar una denegación de servicio, lo que puede provocar una degradación del servicio."
    }
  ],
  "lastModified": "2026-06-17T07:15:22.580",
  "sourceIdentifier": "85b1779b-6ecd-4f52-bcc5-73eac4659dcf"
}