CVE-2025-5501: open5gs

csirt@kutim:~/threat-intel/cve/CVE-2025-5501

CVSS 5.3 · Medium EPSS 0,75%

Kerentanan Reachable Assertion pada open5gs. Skor CVSS 3.1 5.3 (Medium) menurut vuldb.com.

Deskripsi (NVD)

A vulnerability classified as problematic was found in Open5GS up to 2.7.3. Affected by this vulnerability is the function ngap_handle_path_switch_request_transfer of the file src/smf/ngap-handler.c of the component NGAP PathSwitchRequest Message Handler. The manipulation leads to reachable assertion. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The patch is named 2daa44adab762c47a8cef69cc984946973a845b3. It is recommended to apply a patch to fix this issue.

Rincian

Terbit di NVD: 3 Juni 2025
Terakhir diubah: 17 Juni 2026
Status NVD: Analyzed
CVSS 3.1: 5.3 (Medium), sumber vuldb.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-617: Reachable Assertion
EPSS (30 hari): 0,75% peluang dieksploitasi; lebih tinggi dari 53,8% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
open5gs	open5gs	Semua versi hingga 2.7.3

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://github.com/open5gs/open5gs/issues/3909 exploit · issue tracking · advisory vendor
https://github.com/open5gs/open5gs/issues/3909#issuecomment-2926682623 issue tracking · advisory vendor
https://github.com/open5gs/open5gs/commit/2daa44adab762c47a8cef69cc984946973a845b3 patch
https://vuldb.com/?id.310915 advisory pihak ketiga · vdb entry
https://vuldb.com/?submit.582265 advisory pihak ketiga · vdb entry
https://github.com/user-attachments/files/20362183/AMF.crash.due.to.pathswitchrequest.zip not applicable
https://vuldb.com/?ctiid.310915 permissions required · vdb entry

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.