A recent study conducted by academics has uncovered a significant number of security vulnerabilities affecting LTE and 5G implementations. These vulnerabilities, totaling 119 and assigned unique CVE identifiers, impact various LTE and 5G implementations, including Open5GS, Magma, OpenAirInterface, Athonet, SD-Core, NextEPC, and srsRAN for LTE, and Open5GS, Magma, and OpenAirInterface for 5G. Researchers from the University of Florida and North Carolina State University were behind this discovery.
The vulnerabilities identified in the study pose a serious threat, as they could potentially disrupt cellular communications at a city-wide level. By exploiting these vulnerabilities, an attacker could crash critical network components like the Mobility Management Entity (MME) and Access and Mobility Management Function (AMF) with a single data packet, even without authentication. This could lead to widespread service disruption and compromise the cellular core network.
The research team conducted a fuzzing exercise, named RANsacked, targeting Radio Access Network (RAN)-Core interfaces that interact directly with mobile handsets and base stations. The vulnerabilities discovered include buffer overflows and memory corruption errors that could be exploited to breach the cellular core network. This access could enable an attacker to monitor subscriber information, launch targeted attacks, and carry out malicious activities on the network.
The vulnerabilities identified in the study fall into two main categories: those exploitable by any unauthenticated mobile device and those that can be leveraged by an attacker who has compromised a base station or femtocell. The study highlights the evolving security landscape in the face of home-use femtocells and accessible gNodeB base stations in 5G deployments, which introduce new threats to traditionally secure interfaces.
Overall, the findings of this study underscore the critical need for robust security measures in LTE and 5G networks to prevent potential attacks and disruptions. As the telecommunications industry continues to evolve, addressing these vulnerabilities and enhancing network security will be crucial to safeguarding the integrity and availability of cellular services.
Source link