CVE-2024-34048: O-Ran-Sc Ric-Plt-e2mgr

Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days.

O-RAN RIC I-Release e2mgr lacks array size checks in E2nodeConfigUpdateNotificationHandler.

Affected products

  • O-Ran-Sc Ric-Plt-e2mgr: version 6.0.4 only

Published 2024-04-30. Last modified 2026-06-17.