LTE infrastructure runs on commodity hardware and software — "with great commodity comes great responsibility" — so it inherits the software and hardware flaws pervasive in any general-purpose operating system or application.

The threat:

• Modern LTE base stations and core elements are increasingly built on general-purpose hardware and operating systems (think Linux servers, standard CPUs), not bespoke telecom hardware
• That commoditization brings cost and flexibility benefits — but also inherits every vulnerability of those general-purpose systems (unpatched CVEs, misconfigurations, OS bugs)
• The NIST analysis illustrates this with the National Vulnerability Database (NVD) — the same vulnerability ecosystem that affects general IT also affects telecom

The mitigation:

• Security engineering and a secure system development lifecycle (SDLC) — i.e., treat telecom infrastructure with the same disciplined security practices as any other critical software

The big-picture lesson (this whole topic is from a NIST analysis, "LTE Security – How Good Is It?"): as networks become software, telecom security and general IT security converge. The threat model of a 4G core now includes ordinary server compromise, not just radio attacks.

Go deeper:

• NIST SP 800-187 — Guide to LTE Security (2017) — the authoritative NIST publication this entire threat catalogue is built on: LTE architecture, security mechanisms, and each threat with mitigations.

A rogue base station forces a user to downgrade to GSM or UMTS, where significant cryptographic weaknesses exist. Mitigations: ensure an LTE connection (a "use LTE only" option), and use a rogue-base-station detector.

* Downgrade: the rogue cell forces fallback to breakable GSM A5/1. *

The threat:

• A rogue base station can push a phone to downgrade to GSM or UMTS
• Those older standards have significant cryptographic weaknesses (e.g., GSM's broken A5/1, one-sided authentication)
• The illustration: phone asks "Can I use LTE with AES?" — rogue BS replies "No. Use GSM using A5/1."

Why this works: phones support multiple generations for backward compatibility and will fall back when told the better option isn't available. The attacker exploits that fallback to drag the victim onto a weaker, breakable network.

Mitigations:

• Ensure an LTE connection — most current mobile devices don't let a user force staying on LTE, but a "use LTE only" option addresses this
• Use a rogue base station detector

Connection to GSM security: the downgrade attack is why GSM's weaknesses still matter in an LTE world — an attacker doesn't break LTE, they trick you out of it. The defense is refusing to fall back.

Go deeper:

• Detecting IMSI-catchers and other mobile network attacks (CCC Camp, 2015) — the rogue base station that performs the downgrade, and the tell-tale signs (forced fallback, missing LTE) that betray it.
• Stingray phone tracker (Wikipedia) — the commercial IMSI catcher's documented "force a downgrade to an older, less secure protocol" capability — this attack as a real product feature.