Description
A vulnerability was determined in Open5GS up to 2.7.7. The impacted element is the function amf_nudm_sdm_handle_provisioned of the file /src/amf/nudm-handler.c of the component AMF. Executing a manipulation can lead to denial of service. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.
Affected products
open5gs: open5gs
References10
- github.com/open5gs/open5gs/ Product
- github.com/open5gs/open5gs/issues/4403 Issue Tracking
- vuldb.com/submit/804334 Third Party AdvisoryVDB Entry
- vuldb.com/submit/804335 Third Party AdvisoryVDB Entry
- vuldb.com/submit/804337 Third Party AdvisoryVDB Entry
- vuldb.com/vuln/360533 Third Party AdvisoryVDB Entry
- vuldb.com/vuln/360533/cti Permissions RequiredVDB Entry
- vuldb.com/submit/804334 Third Party AdvisoryVDB Entry
- vuldb.com/submit/804335 Third Party AdvisoryVDB Entry
- vuldb.com/submit/804337 Third Party AdvisoryVDB Entry
Metrics
- CVSS 3.1
-
4.3
MEDIUM
Score source: CNA
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L - CVSS 4.0
-
2.1
LOW
Score source: CNA
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - EPSS — exploit probability
- 0% percentile: 28 · as of 13 November 2026
- CWE
- CWE-404
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.