CVE-2025-15684

Katalog CVE

CVSS 5.3 · Medium EPSS 0,74%

Kerentanan Reachable Assertion. Skor CVSS 3.1 5.3 (Medium) menurut vuldb.com.

Deskripsi (NVD)

A vulnerability was detected in Open5GS up to 2.7.6. Affected is the function diam_log_func of the file lib/diameter/common/init.c of the component CER Handler. The manipulation results in reachable assertion. The attack can be executed remotely. The exploit is now public and may be used. Upgrading to version 2.7.7 is able to address this issue. The patch is identified as c1a803516a3c0485696cb9bcca7a80ad857c7383. It is advisable to upgrade the affected component.

Rincian

Terbit di NVD

12 Agustus 2026

Terakhir diubah

29 September 2026

Status NVD

Deferred

CVSS 3.1

5.3 (Medium), sumber vuldb.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-617: Reachable Assertion

EPSS (30 hari)

0,74% peluang dieksploitasi; lebih tinggi dari 53,4% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://github.com/open5gs/open5gs/
• https://github.com/open5gs/open5gs/commit/c1a803516a3c0485696cb9bcca7a80ad857c7383
• https://github.com/open5gs/open5gs/issues/4155
• https://github.com/open5gs/open5gs/releases/tag/v2.7.7
• https://vuldb.com/cve/CVE-2025-15684
• https://vuldb.com/submit/867102
• https://vuldb.com/vuln/387277
• https://vuldb.com/vuln/387277/cti