HIGH🇬🇧 English

CVE-2025-41067

CVSS 8.7v4.0pub. 2025-10-27upd. 2025-10-29

Reachable Assertion vulnerability in Open5GS up to version 2.7.6 allows attackers with connectivity to the NRF to cause a denial of service. An SBI request that deletes the NRF's own registry causes a check that ends up crashing the NRF process and renders the discovery service unavailable.

oryginał EN
CVSS Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

  • Open5gs

    APP
    Open5Gs
    < 2.7.5
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
DoS
CWE
Referencje

Powiązane podatności

CVE-2024-40130CRITICAL9.8PL ✓ten sam produkt

Buffer Overflow w Open5GS v2.6.4 — podatność krytyczna w bibliotece core

CVE-2024-40129CRITICAL9.8PL ✓ten sam produkt

Buffer Overflow w Open5GS v2.6.4 — podatność krytyczna w module PFCP

CVE-2021-28122CRITICAL9.8ten sam produkt

A request-validation issue was discovered in Open5GS 2.1.3 through 2.2.x before 2.2.1. The WebUI component all...

CVE-2025-65559HIGH7.5ten sam produkt

An issue was discovered in Open5GS 2.7.5-49-g465e90f, when processing a PFCP Session Establishment Request (ty...

CVE-2025-63288HIGH7.5ten sam produkt

In Open5GS 2.7.6, AMF crashes when receiving an abnormal NGSetupRequest message, resulting in denial of servic...