SECURITY ADVISORY DOSSIER
CVE-2023-28701
CVSS 9.6CRITICAL
O-RAN Near-RT RIC xApp Message Injection & RAN Hijacking
Vulnerability Overview
Lack of authorization checking on the E2 interface in Near-Real-Time RAN Intelligent Controller (RIC) allows malicious xApps to inject unauthorized RRM control messages and disrupt gNodeB beamforming.
Affected Telecom Components
⚡ O-RAN Near-RT RIC ⚡ E2AP Protocol ⚡ xApp Framework ⚡ 3GPP gNodeB
Recommended Mitigation Guidelines
Enforce E2AP mutual authentication, implement xApp RBAC policy engine, and encrypt E2 interface traffic using IPSec/TLS 1.3.