CVE-2025-15531

Katalog CVE

CVSS 5.3 · Medium EPSS 0,78%

Kerentanan Reachable Assertion pada open5gs. Skor CVSS 3.1 5.3 (Medium) menurut vuldb.com.

Deskripsi (NVD)

A vulnerability was identified in Open5GS up to 2.7.5. This vulnerability affects the function sgwc_bearer_add of the file src/sgwc/context.c. The manipulation leads to reachable assertion. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The issue report is flagged as already-fixed.

Rincian

Terbit di NVD

17 Januari 2026

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.3 (Medium), sumber vuldb.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-617: Reachable Assertion

EPSS (30 hari)

0,78% peluang dieksploitasi; lebih tinggi dari 54,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/open5gs/open5gs/issues/4233 exploit · issue tracking · advisory vendor
• https://github.com/open5gs/open5gs/issues/4233#issue-3776216182 exploit · issue tracking · advisory vendor
• https://vuldb.com/?id.341598 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.729339 advisory pihak ketiga · vdb entry
• https://github.com/open5gs/open5gs/
• https://vuldb.com/?ctiid.341598 permissions required · vdb entry