O-RAN SC develops a focused set of components for open radio access network infrastructure, including the RIC Message Router, RIC Platform E2 Manager, and E2 interface implementations that support disaggregated 5G and beyond deployments. The vulnerability disclosures affecting this vendor reflect the emerging maturity of open RAN standards and tooling rather than a established pattern; live severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by O Ran Sc over time
Signals from CVEs in this vendor scope (7 CVEs).
7 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2024-34048CRITICAL O-RAN RIC I-Release e2mgr lacks array size checks in E2nodeConfigUpdateNotificationHandler. | Apr 30, 2024 | 9.8 | 32 | NO | NO |
CVE-2023-40998HIGH Buffer Overflow vulnerability in O-RAN Software Community ric-plt-lib-rmr v.4.9.0 allows a remote attacker to cause a denial of service via the packet size component. | Aug 28, 2023 | 7.5 | 24 | NO | NO |
CVE-2023-40997HIGH Buffer Overflow vulnerability in O-RAN Software Community ric-plt-lib-rmr v.4.9.0 allows a remote attacker to cause a denial of service via a crafted packet. | Aug 28, 2023 | 7.5 | 24 | NO | NO |
CVE-2023-41628HIGH An issue in O-RAN Software Community E2 G-Release allows attackers to cause a Denial of Service (DoS) by incorrectly initiating the messaging procedure between the E2Node and E2Ter | Sep 1, 2023 | 7.5 | 23 | NO | NO |
CVE-2023-41627HIGH O-RAN Software Community ric-plt-lib-rmr v4.9.0 does not validate the source of the routing tables it receives, potentially allowing attackers to send forged routing tables to the | Sep 1, 2023 | 7.5 | 22 | NO | NO |
CVE-2023-42358HIGH An issue was discovered in O-RAN Software Community ric-plt-e2mgr in the G-Release environment, allows remote attackers to cause a denial of service (DoS) via a crafted request to | Jan 3, 2024 | 7.7 | 21 | NO | NO |
CVE-2024-34047MEDIUM O-RAN RIC I-Release e2mgr lacks array size checks in RicServiceUpdateHandler. | Apr 30, 2024 | 4.3 | 15 | NO | NO |
Signals from CVEs in this vendor scope (7 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by O Ran Sc.
Media articles that mention a CVE ID that affects a product developed by O Ran Sc — matched by CVE ID, not by vendor name.