LENS preprint reports 95 new vulnerabilities in cellular systems

Researchers report finding 95 previously unknown vulnerabilities in cellular implementations using LENS, a language-model system that assesses whether protocol fields can be exploited. Their preprint identifies 17 vulnerabilities in open-source EPC/IMS implementations and 78 in commercial deployments, with effects including service disruption, information leakage and subscriber tracking. LENS guides models through evidence collection, exploitability assessment and proof-of-concept attack generation where applicable. Tests across four models produced mean recall of 94.00% to 98.00%. Applying the system to 16 additional protocols uncovered another 118 previously unknown vulnerabilities. The cellular exploitability findings depend on the study's threat model.