CVE-2025-14955

Katalog CVE

CVSS 3.7 · Low EPSS 0,56%

Kerentanan Improper Initialization pada open5gs. Skor CVSS 3.1 3.7 (Low) menurut vuldb.com.

Deskripsi (NVD)

A vulnerability was found in Open5GS up to 2.7.5. Affected by this vulnerability is the function ogs_pfcp_handle_create_pdr in the library lib/pfcp/handler.c of the component PFCP. The manipulation results in improper initialization. It is possible to launch the attack remotely. This attack is characterized by high complexity. The exploitation appears to be difficult. The exploit has been made public and could be used. The patch is identified as 773117aa5472af26fc9f80e608d3386504c3bdb7. It is best practice to apply a patch to resolve this issue.

Rincian

Terbit di NVD

19 Desember 2025

Terakhir diubah

13 Oktober 2026

Status NVD

Modified

CVSS 3.1

3.7 (Low), sumber vuldb.com
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-665: Improper Initialization

EPSS (30 hari)

0,56% peluang dieksploitasi; lebih tinggi dari 44,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/open5gs/open5gs/issues/4182 exploit · issue tracking · advisory vendor
• https://github.com/open5gs/open5gs/issues/4182#issue-3670797098 exploit · issue tracking · advisory vendor
• https://github.com/open5gs/open5gs/commit/773117aa5472af26fc9f80e608d3386504c3bdb7 patch
• https://vuldb.com/?id.337591 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.716841 advisory pihak ketiga · vdb entry
• https://github.com/open5gs/open5gs/
• https://github.com/open5gs/open5gs/issues/4182#issuecomment-3616081878 issue tracking
• https://vuldb.com/?ctiid.337591 permissions required · vdb entry