CVE-2026-33904

{
  "id": "CVE-2026-33904",
  "sourceIdentifier": "[email protected]",
  "published": "2026-03-27T21:17:26.640",
  "lastModified": "2026-10-26T22:10:00.163",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Ella Core is a 5G core designed for private networks. Prior to version 1.7.0, a deadlock in the AMF's SCTP notification handler causes the entire AMF control plane to hang until the process is restarted. An attacker with access to the N2 interface can cause Ella Core to hang, resulting in a denial of service for all subscribers. Version 1.7.0 adds deferred Radio cleanup in serveConn SCTP server so that every connection exit path removes the radio. Remove the stale-entry scan from SCTP Notification handling."
    },
    {
      "lang": "es",
      "value": "Ella Core es un núcleo 5G diseñado para redes privadas. Antes de la versión 1.7.0, un interbloqueo en el gestor de notificaciones SCTP del AMF provoca que todo el plano de control del AMF se cuelgue hasta que se reinicie el proceso. Un atacante con acceso a la interfaz N2 puede provocar que Ella Core se cuelgue, lo que resulta en una denegación de servicio para todos los suscriptores. La versión 1.7.0 añade una limpieza de radio diferida en el servidor SCTP serveConn para que cada ruta de salida de conexión elimine la radio. Eliminar el escaneo de entradas obsoletas del manejo de notificaciones SCTP."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "ellanetworks",
          "product": "core",
          "versions": [
            {
              "version": "< 1.7.0",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "baseScore": 6.5,
          "baseSeverity": "MEDIUM",
          "attackVector": "ADJACENT_NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 3.6
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-03-31T14:06:26.825446Z",
          "id": "CVE-2026-33904",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-833"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:ellanetworks:ella_core:*:*:*:*:*:*:*:*",
              "versionEndExcluding": "1.7.0",
              "matchCriteriaId": "9BAD1DBD-ED4B-49AB-A563-C4838F8F8979"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/ellanetworks/core/commit/999f606c5cae261471d9e3f063d7ecd1bd754076",
      "source": "[email protected]",
      "tags": [
        "Patch"
      ]
    },
    {
      "url": "https://github.com/ellanetworks/core/releases/tag/v1.7.0",
      "source": "[email protected]",
      "tags": [
        "Release Notes"
      ]
    },
    {
      "url": "https://github.com/ellanetworks/core/security/advisories/GHSA-9h59-p45g-445h",
      "source": "[email protected]",
      "tags": [
        "Vendor Advisory"
      ]
    }
  ]
}