What’s Vulnerable › Vulnerabilities

CVE-2023-41627

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-09-01 · updated 2026-06-17

Description

O-RAN Software Community ric-plt-lib-rmr v4.9.0 does not validate the source of the routing tables it receives, potentially allowing attackers to send forged routing tables to the device.

Affected products

• O-RAN-SC Ric Message Router: 4.9.0

References

• https://jira.o-ran-sc.org/browse/RIC-1001
• https://www.trendmicro.com/en_us/research/23/l/the-current-state-of-open-ran-security.html
• https://jira.o-ran-sc.org/browse/RIC-1001
• https://www.trendmicro.com/en_us/research/23/l/the-current-state-of-open-ran-security.html

Get alerted when CVE-2023-41627 or the next vulnerability affects your stack