MSRC-CVE-2024-20685 — Azure Private 5G Core Denial of Service Vulnerability

Summary

Impact: Denial of Service. Microsoft rating: Moderate. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?
Successful exploitation of this vulnerability requires multiple conditions to be met, such as specific application behavior, user actions, manipulation of parameters passed to a function, and impersonation of an integrity level token.

Security updates
2403.0-2 — https://learn.microsoft.com/en-us/azure/private-5g-core/azure-private-5g-core-release-notes-2403

Vulnerabilities 1

Medium 5.9

CVE-2024-20685

Azure Private 5G Core Denial of Service Vulnerability

Azure Private 5G Core Denial of Service Vulnerability

Microsoft Azure Private 5G Core

Apr 9, 2024

Revision history

2024-04-09 #1
Information published.

References

CVE-2024-20685 Azure Private 5G Core Denial of Service Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20685
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss