[{"name":"C4-252013","title":"Reply LS on UE usage of the RAT restrictions","source":"CT WG1","contact":"Kimmo Kymalainen","contact-id":85426,"tdoctype":"LS in","for":"Information","abstract":"","secretary_remarks":"","agenda_item_sort_order":9,"ainumber":"4.1","ainame":"Incoming liaisons","tdoc_agenda_sort_order":0,"status":"noted","reservation_date":"2025-04-16 08:46:22","uploaded":"2025-04-16 08:49:35","revisionof":"","revisedto":"","release":"Rel-19","crspec":"","crspecversion":"","workitem":[{"winame":"ECRATU"}],"crnumber":"","crrevision":"","crcategory":"","tsg_crp":"","lsreplyto":"","lsto":"RAN2","Cc":"CT4","lsoriginalls":"C1-252546","lsreply":"","link":"https:\/\/www.3gpp.org\/ftp\/tsg_ct\/WG4_protocollars_ex-CN4\/CT4_129_Bratislava-2025-05\/Docs\/C4-252013.zip","group":"C4","meeting":"C4-129","year":2025,"uicc_affected":"","me_affected":"","ran_affected":"","cn_affected":"","clauses_affected":"","crsinpack":null,"crsinpacknumber":0},
{"name":"C4-252014","title":"Reply LS on Advanced Media Delivery","source":"CT WG3","contact":"Kimmo Kymalainen","contact-id":85426,"tdoctype":"LS in","for":"Information","abstract":"","secretary_remarks":"","agenda_item_sort_order":9,"ainumber":"4.1","ainame":"Incoming liaisons","tdoc_agenda_sort_order":0,"status":"noted","reservation_date":"2025-04-16 08:46:22","uploaded":"2025-04-16 08:49:35","revisionof":"","revisedto":"","release":"Rel-19","crspec":"","crspecversion":"","workitem":"","crnumber":"","crrevision":"","crcategory":"","tsg_crp":"","lsreplyto":"","lsto":"SA4","Cc":"CT4","lsoriginalls":"C3-251425","lsreply":"","link":"https:\/\/www.3gpp.org\/ftp\/tsg_ct\/WG4_protocollars_ex-CN4\/CT4_129_Bratislava-2025-05\/Docs\/C4-252014.zip","group":"C4","meeting":"C4-129","year":2025,"uicc_affected":"","me_affected":"","ran_affected":"","cn_affected":"","clauses_affected":"","crsinpack":null,"crsinpacknumber":0},
{"name":"C4-252015","title":"LS Reply on Optimizations to UPF event subscriptions and reporting","source":"CT WG3","contact":"Kimmo Kymalainen","contact-id":85426,"tdoctype":"LS in","for":"Information","abstract":"","secretary_remarks":"","agenda_item_sort_order":9,"ainumber":"4.1","ainame":"Incoming liaisons","tdoc_agenda_sort_order":0,"status":"noted","reservation_date":"2025-04-16 08:46:22","uploaded":"2025-04-16 08:49:35","revisionof":"","revisedto":"","release":"Rel-19","crspec":"","crspecversion":"","workitem":"","crnumber":"","crrevision":"","crcategory":"","tsg_crp":"","lsreplyto":"","lsto":"CT4","Cc":"SA2","lsoriginalls":"C3-251602","lsreply":"","link":"https:\/\/www.3gpp.org\/ftp\/tsg_ct\/WG4_protocollars_ex-CN4\/CT4_129_Bratislava-2025-05\/Docs\/C4-252015.zip","group":"C4","meeting":"C4-129","year":2025,"uicc_affected":"","me_affected":"","ran_affected":"","cn_affected":"","clauses_affected":"","crsinpack":null,"crsinpacknumber":0},
{"name":"C4-252016","title":"LS on Extending Charging Support in 5GC","source":"CT WG3","contact":"Kimmo Kymalainen","contact-id":85426,"tdoctype":"LS in","for":"Information","abstract":"","secretary_remarks":"","agenda_item_sort_order":9,"ainumber":"4.1","ainame":"Incoming liaisons","tdoc_agenda_sort_order":0,"status":"noted","reservation_date":"2025-04-16 08:46:22","uploaded":"2025-04-16 08:49:35","revisionof":"","revisedto":"","release":"Rel-19","crspec":"","crspecversion":"","workitem":[{"winame":"TEI19"}],"crnumber":"","crrevision":"","crcategory":"","tsg_crp":"","lsreplyto":"","lsto":"SA2, SA5","Cc":"CT4","lsoriginalls":"C3-251642","lsreply":"","link":"https:\/\/www.3gpp.org\/ftp\/tsg_ct\/WG4_protocollars_ex-CN4\/CT4_129_Bratislava-2025-05\/Docs\/C4-252016.zip","group":"C4","meeting":"C4-129","year":2025,"uicc_affected":"","me_affected":"","ran_affected":"","cn_affected":"","clauses_affected":"","crsinpack":null,"crsinpacknumber":0},
{"name":"C4-252017","title":"LS on AIML_CN issues","source":"CT WG3","contact":"Kimmo Kymalainen","contact-id":85426,"tdoctype":"LS in","for":"Information","abstract":"","secretary_remarks":"","agenda_item_sort_order":9,"ainumber":"4.1","ainame":"Incoming liaisons","tdoc_agenda_sort_order":0,"status":"noted","reservation_date":"2025-04-16 08:46:22","uploaded":"2025-04-16 08:49:35","revisionof":"","revisedto":"","release":"Rel-19","crspec":"","crspecversion":"","workitem":[{"winame":"AIML_CN"}],"crnumber":"","crrevision":"","crcategory":"","tsg_crp":"","lsreplyto":"","lsto":"SA2","Cc":"CT4","lsoriginalls":"C3-251653","lsreply":"","link":"https:\/\/www.3gpp.org\/ftp\/tsg_ct\/WG4_protocollars_ex-CN4\/CT4_129_Bratislava-2025-05\/Docs\/C4-252017.zip","group":"C4","meeting":"C4-129","year":2025,"uicc_affected":"","me_affected":"","ran_affected":"","cn_affected":"","clauses_affected":"","crsinpack":null,"crsinpacknumber":0},
{"name":"C4-252018","title":"LS Reply to CT4 on MoQ Relay Address in UPF Profile","source":"SA WG2","contact":"Kimmo Kymalainen","contact-id":85426,"tdoctype":"LS in","for":"Information","abstract":"","secretary_remarks":"","agenda_item_sort_order":9,"ainumber":"4.1","ainame":"Incoming liaisons","tdoc_agenda_sort_order":0,"status":"noted","reservation_date":"2025-04-16 08:46:22","uploaded":"2025-04-16 08:49:35","revisionof":"","revisedto":"","release":"Rel-19","crspec":"","crspecversion":"","workitem":[{"winame":"XRM_Ph2"}],"crnumber":"","crrevision":"","crcategory":"","tsg_crp":"","lsreplyto":"","lsto":"CT4","Cc":"","lsoriginalls":"S2-2503908","lsreply":"","link":"https:\/\/www.3gpp.org\/ftp\/tsg_ct\/WG4_protocollars_ex-CN4\/CT4_129_Bratislava-2025-05\/Docs\/C4-252018.zip","group":"C4","meeting":"C4-129","year":2025,"uicc_affected":"","me_affected":"","ran_affected":"","cn_affected":"","clauses_affected":"","crsinpack":null,"crsinpacknumber":0},
{"name":"C4-252019","title":"LS on AIoT device identifier length","source":"SA WG2","contact":"Kimmo Kymalainen","contact-id":85426,"tdoctype":"LS in","for":"Information","abstract":"","secretary_remarks":"","agenda_item_sort_order":9,"ainumber":"4.1","ainame":"Incoming liaisons","tdoc_agenda_sort_order":0,"status":"noted","reservation_date":"2025-04-16 08:46:22","uploaded":"2025-04-16 08:49:35","revisionof":"","revisedto":"","release":"Rel-19","crspec":"","crspecversion":"","workitem":[{"winame":"AmbientIoT-ARC"}],"crnumber":"","crrevision":"","crcategory":"","tsg_crp":"","lsreplyto":"","lsto":"CT4","Cc":"CT1, RAN2, RAN3, SA3","lsoriginalls":"S2-2504296","lsreply":"","link":"https:\/\/www.3gpp.org\/ftp\/tsg_ct\/WG4_protocollars_ex-CN4\/CT4_129_Bratislava-2025-05\/Docs\/C4-252019.zip","group":"C4","meeting":"C4-129","year":2025,"uicc_affected":"","me_affected":"","ran_affected":"","cn_affected":"","clauses_affected":"","crsinpack":null,"crsinpacknumber":0},
{"name":"C4-252020","title":"LS on Optimizations to UPF event subscriptions and reporting","source":"SA WG2","contact":"Kimmo Kymalainen","contact-id":85426,"tdoctype":"LS in","for":"Information","abstract":"","secretary_remarks":"","agenda_item_sort_order":9,"ainumber":"4.1","ainame":"Incoming liaisons","tdoc_agenda_sort_order":0,"status":"noted","reservation_date":"2025-04-16 08:46:22","uploaded":"2025-04-16 08:49:35","revisionof":"","revisedto":"","release":"Rel-19","crspec":"","crspecversion":"","workitem":"","crnumber":"","crrevision":"","crcategory":"","tsg_crp":"","lsreplyto":"","lsto":"CT4","Cc":"CT3","lsoriginalls":"S2-2504469","lsreply":"","link":"https:\/\/www.3gpp.org\/ftp\/tsg_ct\/WG4_protocollars_ex-CN4\/CT4_129_Bratislava-2025-05\/Docs\/C4-252020.zip","group":"C4","meeting":"C4-129","year":2025,"uicc_affected":"","me_affected":"","ran_affected":"","cn_affected":"","clauses_affected":"","crsinpack":null,"crsinpacknumber":0},
{"name":"C4-252021","title":"LS reply to LS on Security related protocol-specific parameters for N6 delay measurement","source":"SA WG3","contact":"Kimmo Kymalainen","contact-id":85426,"tdoctype":"LS in","for":"Information","abstract":"","secretary_remarks":"","agenda_item_sort_order":9,"ainumber":"4.1","ainame":"Incoming liaisons","tdoc_agenda_sort_order":0,"status":"noted","reservation_date":"2025-04-16 08:46:22","uploaded":"2025-04-16 08:49:35","revisionof":"","revisedto":"","release":"Rel-19","crspec":"","crspecversion":"","workitem":[{"winame":"eEDGE_5GC_Ph3"}],"crnumber":"","crrevision":"","crcategory":"","tsg_crp":"","lsreplyto":"","lsto":"CT4","Cc":"CT3, SA2","lsoriginalls":"S3-251667","lsreply":"","link":"https:\/\/www.3gpp.org\/ftp\/tsg_ct\/WG4_protocollars_ex-CN4\/CT4_129_Bratislava-2025-05\/Docs\/C4-252021.zip","group":"C4","meeting":"C4-129","year":2025,"uicc_affected":"","me_affected":"","ran_affected":"","cn_affected":"","clauses_affected":"","crsinpack":null,"crsinpacknumber":0},
{"name":"C4-252022","title":"LS reply on use of 3gpp-Sbi-Originating-Network-Id for Indirect Network Sharing case","source":"SA WG3","contact":"Kimmo Kymalainen","contact-id":85426,"tdoctype":"LS in","for":"Information","abstract":"","secretary_remarks":"","agenda_item_sort_order":9,"ainumber":"4.1","ainame":"Incoming liaisons","tdoc_agenda_sort_order":0,"status":"noted","reservation_date":"2025-04-16 08:46:22","uploaded":"2025-04-16 08:49:35","revisionof":"","revisedto":"","release":"Rel-19","crspec":"","crspecversion":"","workitem":"","crnumber":"","crrevision":"","crcategory":"","tsg_crp":"","lsreplyto":"","lsto":"CT4","Cc":"SA2","lsoriginalls":"S3-251782","lsreply":"","link":"https:\/\/www.3gpp.org\/ftp\/tsg_ct\/WG4_protocollars_ex-CN4\/CT4_129_Bratislava-2025-05\/Docs\/C4-252022.zip","group":"C4","meeting":"C4-129","year":2025,"uicc_affected":"","me_affected":"","ran_affected":"","cn_affected":"","clauses_affected":"","crsinpack":null,"crsinpacknumber":0},
{"name":"C4-252023","title":"LS reply to LS on energy information collection from OAM to EIF","source":"TSG CT","contact":"Kimmo Kymalainen","contact-id":85426,"tdoctype":"LS in","for":"Information","abstract":"","secretary_remarks":"","agenda_item_sort_order":9,"ainumber":"4.1","ainame":"Incoming liaisons","tdoc_agenda_sort_order":0,"status":"noted","reservation_date":"2025-04-16 08:52:21","uploaded":"2025-04-16 08:52:50","revisionof":"","revisedto":"","release":"Rel-19","crspec":"","crspecversion":"","workitem":[{"winame":"EnergySys"}],"crnumber":"","crrevision":"","crcategory":"","tsg_crp":"","lsreplyto":"S5-250843","lsto":"SA5","Cc":"SA, SA2, CT3, CT4","lsoriginalls":"CP-250253","lsreply":"","link":"https:\/\/www.3gpp.org\/ftp\/tsg_ct\/WG4_protocollars_ex-CN4\/CT4_129_Bratislava-2025-05\/Docs\/C4-252023.zip","group":"C4","meeting":"C4-129","year":2025,"uicc_affected":"","me_affected":"","ran_affected":"","cn_affected":"","clauses_affected":"","crsinpack":null,"crsinpacknumber":0},
{"name":"C4-252024","title":"LS on paging ID length","source":"RAN2","contact":"Kimmo Kymalainen","contact-id":85426,"tdoctype":"LS in","for":"Discussion","abstract":"","secretary_remarks":"","agenda_item_sort_order":9,"ainumber":"4.1","ainame":"Incoming liaisons","tdoc_agenda_sort_order":0,"status":"noted","reservation_date":"2025-04-23 15:56:23","uploaded":"2025-04-23 15:59:51","revisionof":"","revisedto":"","release":"Rel-19","crspec":"","crspecversion":"","workitem":[{"winame":"Ambient_IoT_Solutions-Core"}],"crnumber":"","crrevision":"","crcategory":"","tsg_crp":"","lsreplyto":"","lsto":"SA2, CT4","Cc":"RAN3","lsoriginalls":"R2-2503197","lsreply":"","link":"https:\/\/www.3gpp.org\/ftp\/tsg_ct\/WG4_protocollars_ex-CN4\/CT4_129_Bratislava-2025-05\/Docs\/C4-252024.zip","group":"C4","meeting":"C4-129","year":2025,"uicc_affected":"","me_affected":"","ran_affected":"","cn_affected":"","clauses_affected":"","crsinpack":null,"crsinpacknumber":0},
{"name":"C4-252025","title":"LS reply to LS on 5G Trace to support UE level measurement","source":"SA5","contact":"Kimmo Kymalainen","contact-id":85426,"tdoctype":"LS in","for":"Discussion","abstract":"","secretary_remarks":"","agenda_item_sort_order":9,"ainumber":"4.1","ainame":"Incoming liaisons","tdoc_agenda_sort_order":0,"status":"noted","reservation_date":"2025-04-23 15:58:56","uploaded":"2025-04-23 15:59:51","revisionof":"","revisedto":"","release":"Rel-18","crspec":"","crspecversion":"","workitem":[{"winame":"TEI18"}],"crnumber":"","crrevision":"","crcategory":"","tsg_crp":"","lsreplyto":"C4-245536","lsto":"CT4","Cc":"CT3","lsoriginalls":"S5-252113","lsreply":"","link":"https:\/\/www.3gpp.org\/ftp\/tsg_ct\/WG4_protocollars_ex-CN4\/CT4_129_Bratislava-2025-05\/Docs\/C4-252025.zip","group":"C4","meeting":"C4-129","year":2025,"uicc_affected":"","me_affected":"","ran_affected":"","cn_affected":"","clauses_affected":"","crsinpack":null,"crsinpacknumber":0},
{"name":"C4-252026","title":"Remove time service endpoints from MBSTF scope","source":"SA4","contact":"Kimmo Kymalainen","contact-id":85426,"tdoctype":"LS in","for":"Discussion","abstract":"","secretary_remarks":"","agenda_item_sort_order":9,"ainumber":"4.1","ainame":"Incoming liaisons","tdoc_agenda_sort_order":0,"status":"noted","reservation_date":"2025-04-24 14:51:06","uploaded":"2025-04-24 14:56:03","revisionof":"","revisedto":"","release":"Rel-19","crspec":"","crspecversion":"","workitem":[{"winame":"AMD-ARCH-MED"}],"crnumber":"","crrevision":"","crcategory":"","tsg_crp":"","lsreplyto":"C3-251425","lsto":"CT3, CT4","Cc":"SA2","lsoriginalls":"S4-250692","lsreply":"","link":"https:\/\/www.3gpp.org\/ftp\/tsg_ct\/WG4_protocollars_ex-CN4\/CT4_129_Bratislava-2025-05\/Docs\/C4-252026.zip","group":"C4","meeting":"C4-129","year":2025,"uicc_affected":"","me_affected":"","ran_affected":"","cn_affected":"","clauses_affected":"","crsinpack":null,"crsinpacknumber":0},
{"name":"C4-252027","title":"Reply LS on Encoding of (S)RTP Multiplexed Media Identification Information","source":"SA4","contact":"Kimmo Kymalainen","contact-id":85426,"tdoctype":"LS in","for":"Discussion","abstract":"","secretary_remarks":"","agenda_item_sort_order":9,"ainumber":"4.1","ainame":"Incoming liaisons","tdoc_agenda_sort_order":0,"status":"noted","reservation_date":"2025-04-24 14:53:24","uploaded":"2025-04-24 14:56:03","revisionof":"","revisedto":"","release":"Rel-19","crspec":"","crspecversion":"","workitem":[{"winame":"XRM_Ph2"}],"crnumber":"","crrevision":"","crcategory":"","tsg_crp":"","lsreplyto":"C4-251476","lsto":"CT4","Cc":"SA2, CT1, CT3","lsoriginalls":"S4-250734","lsreply":"","link":"https:\/\/www.3gpp.org\/ftp\/tsg_ct\/WG4_protocollars_ex-CN4\/CT4_129_Bratislava-2025-05\/Docs\/C4-252027.zip","group":"C4","meeting":"C4-129","year":2025,"uicc_affected":"","me_affected":"","ran_affected":"","cn_affected":"","clauses_affected":"","crsinpack":null,"crsinpacknumber":0},
{"name":"C4-252028","title":"LS to SA2 and CT4 on N6-Unmarked PDUs","source":"SA4","contact":"Kimmo Kymalainen","contact-id":85426,"tdoctype":"LS in","for":"Discussion","abstract":"","secretary_remarks":"","agenda_item_sort_order":9,"ainumber":"4.1","ainame":"Incoming liaisons","tdoc_agenda_sort_order":0,"status":"postponed","reservation_date":"2025-04-24 14:55:35","uploaded":"2025-04-24 14:56:03","revisionof":"","revisedto":"C4-253013","release":"Rel-19","crspec":"","crspecversion":"","workitem":[{"winame":"5G_RTP_Ph2"}],"crnumber":"","crrevision":"","crcategory":"","tsg_crp":"","lsreplyto":"","lsto":"SA2, CT4","Cc":"","lsoriginalls":"S4-250738","lsreply":"","link":"https:\/\/www.3gpp.org\/ftp\/tsg_ct\/WG4_protocollars_ex-CN4\/CT4_129_Bratislava-2025-05\/Docs\/C4-252028.zip","group":"C4","meeting":"C4-129","year":2025,"uicc_affected":"","me_affected":"","ran_affected":"","cn_affected":"","clauses_affected":"","crsinpack":null,"crsinpacknumber":0},
{"name":"C4-252029","title":"LS on Advanced MF capability registration and discovery","source":"SA4","contact":"Kimmo Kymalainen","contact-id":85426,"tdoctype":"LS in","for":"Discussion","abstract":"","secretary_remarks":"","agenda_item_sort_order":9,"ainumber":"4.1","ainame":"Incoming liaisons","tdoc_agenda_sort_order":0,"status":"postponed","reservation_date":"2025-04-30 16:35:40","uploaded":"2025-04-30 16:36:20","revisionof":"","revisedto":"C4-253014","release":"Rel-19","crspec":"","crspecversion":"","workitem":[{"winame":"SR_IMS"}],"crnumber":"","crrevision":"","crcategory":"","tsg_crp":"","lsreplyto":"","lsto":"SA2, CT4","Cc":"","lsoriginalls":"S4-250746","lsreply":"","link":"https:\/\/www.3gpp.org\/ftp\/tsg_ct\/WG4_protocollars_ex-CN4\/CT4_129_Bratislava-2025-05\/Docs\/C4-252029.zip","group":"C4","meeting":"C4-129","year":2025,"uicc_affected":"","me_affected":"","ran_affected":"","cn_affected":"","clauses_affected":"","crsinpack":null,"crsinpacknumber":0},
{"name":"C4-252271","title":"LS on the creation of the Getting Ready for Energy-Efficient Networking  Working Group in the IET","source":"IETF Getting Ready for Energy-Efficient Networking Working Group (GREEN)","contact":"Kimmo Kymalainen","contact-id":85426,"tdoctype":"LS in","for":"Discussion","abstract":"","secretary_remarks":"","agenda_item_sort_order":9,"ainumber":"4.1","ainame":"Incoming liaisons","tdoc_agenda_sort_order":0,"status":"noted","reservation_date":"2025-09-05 15:03:54","uploaded":"2025-05-09 15:08:04","revisionof":"","revisedto":"","release":"","crspec":"","crspecversion":"","workitem":"","crnumber":"","crrevision":"","crcategory":"","tsg_crp":"","lsreplyto":"","lsto":"3GPP RAN1, RAN4, SA2, SA3, SA4, SA5, CT1,CT4","Cc":"","lsoriginalls":"ls-green-wg","lsreply":"","link":"https:\/\/www.3gpp.org\/ftp\/tsg_ct\/WG4_protocollars_ex-CN4\/CT4_129_Bratislava-2025-05\/Docs\/C4-252271.zip","group":"C4","meeting":"C4-129","year":2025,"uicc_affected":"","me_affected":"","ran_affected":"","cn_affected":"","clauses_affected":"","crsinpack":null,"crsinpacknumber":0},
{"name":"C4-252272","title":"LS on draft-ietf-6man-deprecate-router-alert, \u201cDeprecation of the IPv6 Router Alert Option for New Protocols\u201d","source":"IETF IPv6 Maintenance (6MAN)","contact":"Kimmo Kymalainen","contact-id":85426,"tdoctype":"LS in","for":"Discussion","abstract":"","secretary_remarks":"","agenda_item_sort_order":9,"ainumber":"4.1","ainame":"Incoming liaisons","tdoc_agenda_sort_order":0,"status":"noted","reservation_date":"2025-09-05 15:05:27","uploaded":"2025-05-09 15:08:04","revisionof":"","revisedto":"","release":"","crspec":"","crspecversion":"","workitem":"","crnumber":"","crrevision":"","crcategory":"","tsg_crp":"","lsreplyto":"","lsto":"3GPP TSG RAN WG2, 3GPP TSG SA WG2, 3GPP TSG CT WG1, 3GPP TSG CT WG3, 3GPP TSG CT WG4","Cc":"","lsoriginalls":"ls-draft-ietf-6man-deprecate-router-alert","lsreply":"","link":"https:\/\/www.3gpp.org\/ftp\/tsg_ct\/WG4_protocollars_ex-CN4\/CT4_129_Bratislava-2025-05\/Docs\/C4-252272.zip","group":"C4","meeting":"C4-129","year":2025,"uicc_affected":"","me_affected":"","ran_affected":"","cn_affected":"","clauses_affected":"","crsinpack":null,"crsinpacknumber":0},
{"name":"C4-252360","title":"CVD-2025-0101 \u2013 Four critical vulnerabilities in the access control mechanism of the 5G core Network","source":"GSMA CVD PoE","contact":"Kimmo Kymalainen","contact-id":85426,"tdoctype":"LS in","for":"Discussion","abstract":"The GSMA Coordinated Vulnerability Disclosure Program Panel of Experts (CVD PoE) has recently reviewed a submission CVD-2025-0101 \" From Control to Chaos: A Comprehensive Formal Analysis of 5G\u2019s Access Control\", from researchers at Pennsylvania State University.\nOne of the attacks in this submission named \"A1: Coarse Scope Attack\" exploits the fact that content of the producerSnssaiList attribute in the OAuth 2.0 access token granted by the NRF to the NF Consumer is not clearly enough defined in the 3GPP specifications, which can lead to incorrect implementations in the NRF. Specifically, instead of including only the authorized for the particular NF Consumer slices into this attribute, the NRF can mistakenly include all slices supported by the NF Producer. Consequently, a malicious NF Consumer can use this access token to access services of all slices served by the NF Producer, beyond those to which this NF Consumer is authorized to. This compromises the isolation between network slices, potentially leading to data leakage, service disruption, and unauthorized resource usage.\n3GPP TS 29.510 Table 6.3.5.2.4-1 defines producerSnssaiList in the following way: \"This IE may be included if the NRF supports providing list of S-NSSAIs of the NF service producer in the access token claims.\" From the above, it is not clear which S-NSSAIs should be included in this list - only the slices authorized for the NF Consumer, or all slices supported by the NF Producer. If all S-NSSAIs supported by NF Producer are included (because TS is interpreted by NRF vendor in that way), then the described attack is possible.","secretary_remarks":"","agenda_item_sort_order":9,"ainumber":"4.1","ainame":"Incoming liaisons","tdoc_agenda_sort_order":236000,"status":"postponed","reservation_date":"2025-05-14 09:43:45","uploaded":"2025-05-14 09:43:45","revisionof":"","revisedto":"C4-253015","release":"","crspec":"","crspecversion":"","workitem":"","crnumber":"","crrevision":"","crcategory":"","tsg_crp":"","lsreplyto":"","lsto":"CT1, CT4, SA3","Cc":"","lsoriginalls":"","lsreply":"","link":"https:\/\/www.3gpp.org\/ftp\/tsg_ct\/WG4_protocollars_ex-CN4\/CT4_129_Bratislava-2025-05\/Docs\/C4-252360.zip","group":"C4","meeting":"C4-129","year":2025,"uicc_affected":"","me_affected":"","ran_affected":"","cn_affected":"","clauses_affected":"","crsinpack":null,"crsinpacknumber":0},
{"name":"C4-252399","title":"LS on new AVPs in TS 29.214","source":"CT3","contact":"Kimmo Kymalainen","contact-id":85426,"tdoctype":"LS in","for":"Discussion","abstract":"","secretary_remarks":"","agenda_item_sort_order":9,"ainumber":"4.1","ainame":"Incoming liaisons","tdoc_agenda_sort_order":239900,"status":"noted","reservation_date":"2025-05-14 09:43:45","uploaded":"2025-05-14 09:43:45","revisionof":"","revisedto":"","release":"Rel-17","crspec":"","crspecversion":"","workitem":[{"winame":"MPS2"},{"winame":" 5GSAT_Ph3_ARCH"}],"crnumber":"","crrevision":"","crcategory":"","tsg_crp":"","lsreplyto":"","lsto":"CT4","Cc":"","lsoriginalls":"C3-252476","lsreply":"","link":"https:\/\/www.3gpp.org\/ftp\/tsg_ct\/WG4_protocollars_ex-CN4\/CT4_129_Bratislava-2025-05\/Docs\/C4-252399.zip","group":"C4","meeting":"C4-129","year":2025,"uicc_affected":"","me_affected":"","ran_affected":"","cn_affected":"","clauses_affected":"","crsinpack":null,"crsinpacknumber":0}]