Approved changes feed: RSS · Atom
cpe:2.3:a:ellanetworks:core:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Ellanetworks (7d3791b5-0a66-5c7b-acc4-56acfd956bdb) |
|---|---|
| Product | Core (ab87d9b1-ad3a-56d3-af59-13f6173649fb) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-44475 |
vulnerable | 2026-06-08 08:05:11.099639 |
Ella Core: UE Security Capability bypass on NGAP PathSwitchRequest
MEDIUM (6.1)
Ella Core is a 5G core designed for private networks. Prior to 1.10.0, Ella Core does not verify the UE Security Capabilities received in NGAP PathSwitchRequest messages against its locally stored values. A malicious gNB can overwrite Ella Core's stored UE security capabilities for any UE with arbitrary values by sending a single crafted PathSwitchRequest. This vulnerability is fixed in 1.10.0.
Published: 2026-05-27T15:15:27.767Z
Updated: 2026-05-28T15:36:26.428Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-44474 |
vulnerable | 2026-06-08 08:05:11.099399 |
Ella Core: Handover failures during concurrent Security Mode Command
LOW (3.7)
Ella Core is a 5G core designed for private networks. Prior to 1.10.0, Ella Core didn't enforce security rules on concurrent running of security procedures defined in TS 33.501 §6.9.5.1 — it could send a NAS Security Mode Command while an N2 handover was still pending (and vice versa). Concurrent Security Mode Command and N2 handover produce a KgNB mismatch between the UE and target gNB, causing the handover to fail. Requires a stalled gNB + re-registration race to trigger. This vulnerability is fixed in 1.10.0.
Published: 2026-05-27T15:14:49.390Z
Updated: 2026-05-27T17:23:14.076Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-44473 |
vulnerable | 2026-06-08 08:05:11.099085 |
Ella Core: UE Downlink Redirection via Forged PDUSessionResourceSetupResponse
HIGH (7.1)
Ella Core is a 5G core designed for private networks. Prior to 1.10.0, a radio with a valid NG Setup can send a forged PDUSessionResourceSetupResponse carrying any UE's AMF-UE-NGAP-ID. Ella Core does not verify the message arrived on the SCTP association bound to that UE's logical NG-connection, then creates a GTP tunnel towards that radio. This vulnerability is fixed in 1.10.0.
Published: 2026-05-27T15:16:05.261Z
Updated: 2026-05-28T14:33:35.170Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-34762 |
vulnerable | 2026-06-08 07:59:13.079621 |
Ella Core Has Audit Log Falsification via Path/Body IMSI Mismatch in UpdateSubscriber
LOW (2.7)
Ella Core is a 5G core designed for private networks. Prior to version 1.8.0, the PUT /api/v1/subscriber/{imsi} API accepts an IMSI identifier from both the URL path and the JSON request body but never verifies they match. This allows an authenticated NetworkManager to modify any subscriber's policy while the audit trail records a fabricated or unrelated subscriber IMSI. This issue has been patched in version 1.8.0.
Published: 2026-04-02T19:03:54.247Z
Updated: 2026-04-03T15:39:50.305Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-34761 |
vulnerable | 2026-06-08 07:59:13.079374 |
Ella Core Panics Upon NGAP handover failure
MEDIUM (5.8)
Ella Core is a 5G core designed for private networks. Prior to version 1.8.0, Ella Core panics when processing a NGAP handover failure message. An attacker able to cause a gNodeB to send NGAP handover failure messages to Ella Core can crash the process, causing service disruption for all connected subscribers. This issue has been patched in version 1.8.0.
Published: 2026-04-02T19:03:05.307Z
Updated: 2026-04-03T15:43:40.050Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-33907 |
vulnerable | 2026-06-08 07:59:11.585526 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-33906 |
vulnerable | 2026-06-08 07:59:11.585093 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-33904 |
vulnerable | 2026-06-08 07:59:11.584494 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-33903 |
vulnerable | 2026-06-08 07:59:11.584134 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-33283 |
vulnerable | 2026-06-08 07:59:09.605778 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-33282 |
vulnerable | 2026-06-08 07:59:09.605362 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-33281 |
vulnerable | 2026-06-08 07:59:09.603592 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-32320 |
vulnerable | 2026-06-08 07:57:17.414396 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-32319 |
vulnerable | 2026-06-08 07:57:17.412973 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.