Researchers Find 84 Flaws in 4G and 5G Network Cores

Researchers from Singapore's Nanyang Technological University have identified a significant class of 84 security vulnerabilities affecting the core infrastructure of both 4G and 5G mobile networks. These flaws, if exploited, pose substantial risks, including the potential for denial-of-service (DoS) attacks that could disrupt network availability and, more critically, session hijacking. Session hijacking would enable an unauthorized attacker to gain control over a legitimate user's active network session, potentially leading to unauthorized access to data or services.

The study, published by the research group, details how these vulnerabilities are widespread within the core network components. The implications of these findings are far-reaching, given the ubiquitous nature of 4G and 5G technology, which underpins not only mobile communication but also a growing array of critical infrastructure and Internet of Things (IoT) devices. The researchers have categorized these vulnerabilities, highlighting the specific mechanisms through which they can be exploited. The disclosure comes at a time when mobile network security is paramount, with increasing reliance on these networks for sensitive transactions and communications.

While the specific technical details of each of the 84 flaws have not been fully disclosed in the initial report, the researchers have indicated that the vulnerabilities are systemic and present across various implementations of 4G and 5G core network technologies. The Nanyang Technological University team has emphasized the need for urgent attention from network operators and equipment manufacturers to address these security weaknesses. The potential for session hijacking is particularly concerning, as it could allow attackers to impersonate users, intercept communications, or conduct fraudulent activities under a victim's identity. The researchers' work aims to bring these overlooked vulnerabilities to light, prompting a proactive security response within the telecommunications industry.

The academic study underscores the ongoing challenges in securing complex and evolving network architectures like those used in modern mobile telecommunications. As networks become more sophisticated and interconnected, the attack surface for malicious actors expands. The findings from Nanyang Technological University serve as a critical reminder that continuous vigilance and rigorous security auditing are essential to maintain the integrity and trustworthiness of these vital communication systems. The researchers are expected to provide further technical details and mitigation strategies to the relevant industry stakeholders to facilitate the patching and remediation of these identified security gaps.