SECURITY ADVISORY DOSSIER
CVE-2019-15846
CVSS 7.8HIGH
GTP-U User Plane Tunnel Spoofing & Traffic Decapsulation
Vulnerability Overview
Vulnerability in GPRS Tunneling Protocol User Plane (GTP-U) encapsulation allowing unauthenticated TEID injection to intercept subscriber IP traffic across 4G LTE/5G NSA user planes.
Affected Telecom Components
⚡ GTP-U Protocol ⚡ SGW/PGW User Plane ⚡ UPF Router ⚡ 3GPP TS 29.281
Recommended Mitigation Guidelines
Enforce GTP firewall inspection at N4/S5/S8 interfaces, drop unmapped TEIDs, and apply IPsec encapsulation for user plane links.