SECURITY ADVISORY DOSSIER
CVE-2023-41993
CVSS 9.8CRITICAL
5G SBA HTTP/2 Mutual Authentication Bypass & Rogue NF Registration
Vulnerability Overview
Improper TLS client certificate validation in 5G Service Based Architecture NRF (Network Repository Function) allows unauthenticated network functions to register rogue endpoints and intercept cross-slice SBI traffic.
Affected Telecom Components
⚡ 5G NRF ⚡ NRF REST API ⚡ 3GPP TS 29.510 ⚡ HTTP/2 Gateway
Recommended Mitigation Guidelines
Enforce strict mTLS verification at N32/NRF boundary and require OAuth 2.0 token introspection for all Nnrf_NFManagement requests.