ZeroHour

CVE-2025-25774

PoC ×2
CVSS 3.1
6.5 medium
EPSS
<1%p35
Published
()
Modified
Description

An issue was discovered in Open5GS v2.7.2. When a UE switches between two gNBs and sends a handover request at a specific time, it may cause an exception in the AMF's internal state machine, leading to an AMF crash and resulting in a Denial of Service (DoS).

Vendors
open5gs
Products
open5gs
Weakness
CWE-691
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

In the news

No ingested article mentions this CVE yet.