High severity · published Oct 23, 2023
CVE-2023-46324
pkg/suci/suci.go in free5GC udm before 1.2.0, when Go before 1.19 is used, allows an Invalid Curve Attack because it may compute a shared secret via an uncompressed public key…
7.5
CVSS
0.5%
EPSS
No
On KEV
Description
pkg/suci/suci.go in free5GC udm before 1.2.0, when Go before 1.19 is used, allows an Invalid Curve Attack because it may compute a shared secret via an uncompressed public key that has not been validated. An attacker can send arbitrary SUCIs to the UDM, which tries to decrypt them via both its private key and the attacker's public key.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 43% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
UD
Udm · Free5gc
before 1.2.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-46324
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-46324
Product
https://github.com/free5gc/udm/compare/v1.1.1...v1.2.0
Patch
https://github.com/free5gc/udm/pull/20
www.gsma.com
https://www.gsma.com/security/wp-content/uploads/2023/10/0073-invalid_curve.pdf
More from Udm
8.6
CVE-2026-33191
free5GC UDM vulnerable to null byte injection in URL path parameters causing 500 Internal Server Error
7.5
CVE-2026-33064
free5GC UDM DataChangeNotification Procedure Panic Due to Nil Pointer Dereference
7.5
CVE-2026-27642
free5GC has Improper Input Validation in UDM UEAU Service
7.5
CVE-2025-69252
free5GC has Null Pointer Dereference in UDM, Leading to Service Panic
7.5
CVE-2025-69250
free5GC has Improper Error Handling in UDM, Leading to Information Exposure