SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2023-4885

Man in the Middle vulnerability, which could allow an attacker to intercept VNF (Virtual Network Function) communications resulting in the exposure of sensitive information.

MEDIUM 5.9EPSS 0.32%

Does this matter?

Lower severity and a low EPSS score (0.32%). Track it; it rarely justifies an emergency change on its own.

Description

Man in the Middle vulnerability, which could allow an attacker to intercept VNF (Virtual Network Function) communications resulting in the exposure of sensitive information.

CVSS 3.1
5.9 MEDIUMCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.32% probability · 25th percentile
CISA KEV
Not listed
Weakness
CWE-300
Affected
open5gs/open5gs
Source
cve-coordination@incibe.es

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.