Medium severity6.5NVD Advisory· Published Jan 21, 2025· Updated Jun 17, 2026

CVE-2023-37028

Description

A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP E-RAB Modification Indication packet missing an expected eNB_UE_S1AP_ID field.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Linux Foundation/Magma
cpe:2.3:a:linuxfoundation:magma:*:*:*:*:*:*:*:*
Range: <1.9
Magma/Mobile Management Entity (MME)description
Magma/Mobile Management Entityllm-fuzzy
Range: <=1.8.0
Magma/Magmallm-fuzzy
Range: <=1.8.0

Patches

Vulnerability mechanics

References

cellularsecurity.org/ransackednvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000