What’s Vulnerable › Vulnerabilities

CVE-2023-40998

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-08-28 · updated 2026-06-17
• Weakness: CWE-120

Description

Buffer Overflow vulnerability in O-RAN Software Community ric-plt-lib-rmr v.4.9.0 allows a remote attacker to cause a denial of service via the packet size component.

Affected products

• O-RAN-SC Ric Message Router: 4.9.0

References

• https://jira.o-ran-sc.org/browse/RIC-989
• https://www.trendmicro.com/en_us/research/23/l/the-current-state-of-open-ran-security.html
• https://jira.o-ran-sc.org/browse/RIC-989
• https://www.trendmicro.com/en_us/research/23/l/the-current-state-of-open-ran-security.html

Get alerted when CVE-2023-40998 or the next vulnerability affects your stack