CVE-2025-5935

Katalog CVE

CVSS 7.5 · High EPSS 0,90%

Kerentanan Improper Resource Shutdown or Release pada open5gs. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

A vulnerability was found in Open5GS up to 2.7.3. It has been declared as problematic. Affected by this vulnerability is the function common_register_state of the file src/mme/emm-sm.c of the component AMF/MME. The manipulation of the argument ran_ue_id leads to denial of service. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of the patch is 62cb99755243c9c38e4c060c5d8d0e158fe8cdd5. It is recommended to apply a patch to fix this issue.

Rincian

Terbit di NVD

10 Juni 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-404: Improper Resource Shutdown or Release

EPSS (30 hari)

0,90% peluang dieksploitasi; lebih tinggi dari 58,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/open5gs/open5gs/commit/62cb99755243c9c38e4c060c5d8d0e158fe8cdd5 patch
• https://vuldb.com/?id.311713 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.589354 advisory pihak ketiga · vdb entry
• https://github.com/open5gs/open5gs/issues/3874 exploit · issue tracking
• https://github.com/open5gs/open5gs/issues/3874#issuecomment-2853547622 issue tracking
• https://github.com/user-attachments/files/19863206/Problematic.handover.required.process.zip not applicable
• https://vuldb.com/?ctiid.311713 permissions required · vdb entry