CVE-2025-9405

Katalog CVE

CVSS 5.3 · Medium EPSS 0,63%

Kerentanan Reachable Assertion pada open5gs. Skor CVSS 3.1 5.3 (Medium) menurut vuldb.com.

Deskripsi (NVD)

A security flaw has been discovered in Open5GS up to 2.7.5. The impacted element is the function gmm_state_exception of the file src/amf/gmm-sm.c. The manipulation results in reachable assertion. It is possible to launch the attack remotely. The exploit has been released to the public and may be exploited. The patch is identified as 8e5fed16114f2f5e40bee1b161914b592b2b7b8f. Applying a patch is advised to resolve this issue.

Rincian

Terbit di NVD

25 Agustus 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.3 (Medium), sumber vuldb.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-617: Reachable Assertion

EPSS (30 hari)

0,63% peluang dieksploitasi; lebih tinggi dari 48,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/open5gs/open5gs/commit/8e5fed16114f2f5e40bee1b161914b592b2b7b8f patch
• https://github.com/ZHENGHAOHELLO/BugReport/blob/main/CVE-2025-9405 advisory pihak ketiga
• https://vuldb.com/?id.321241 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.633467 advisory pihak ketiga · vdb entry
• https://github.com/open5gs/open5gs/issues/3947 exploit · issue tracking
• https://github.com/open5gs/open5gs/issues/3947#issuecomment-3029992728 issue tracking
• https://github.com/user-attachments/files/21013084/amf_udm-uecm.zip product
• https://vuldb.com/?ctiid.321241 permissions required · vdb entry