Threat Category: VoLTE
ID: CEL-16
Threat Description: Unauthorized changes to the VoLTE Quality of Service class of identifier (QCI) can alter data reception characteristics, including the availability of the call’s bandwidth and packet transmission delay or loss characteristics.
Threat Origin
Insecurity of Voice Solution VoLTE in LTE Mobile Networks 1
How Voice Call Technology Poses Security Threats in 4G LTE Networks 2
Exploit Examples
Not Applicable
CVE Examples
Not Applicable
Possible Countermeasures
References
C.-Y. Li et al. “Insecurity of Voice Solution VoLTE in LTE Mobile Networks”, In Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security, 2015, pp. 316-327; http://dx.doi.org/10.1145/2810103.2813618 [accessed 8/23/2016] ↩
G.-H. Tu et al., “How Voice Call Technology Poses Security Threats in 4G LTE Networks”, in Proceedings of 2015 IEEE Conference on Communications and Network Security (CNS), 2015; https://ieeexplore.ieee.org/stamp/stamp.jsp?arnumber=7346856 [accessed 8/1/2022] ↩