CVE-2025-5501

MEDIUM EPSS 45.9%
Published Jun 3, 20251y ago · Modified Jun 17, 20261w ago
6.9 CVSS 4.0
Medium
Find Similar
Published Jun 3, 2025 1y ago
Last Modified Jun 17, 2026 1w ago

Description

A vulnerability classified as problematic was found in Open5GS up to 2.7.3. Affected by this vulnerability is the function ngap_handle_path_switch_request_transfer of the file src/smf/ngap-handler.c of the component NGAP PathSwitchRequest Message Handler. The manipulation leads to reachable assertion. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The patch is named 2daa44adab762c47a8cef69cc984946973a845b3. It is recommended to apply a patch to fix this issue.

CVSS Details

Base Score
6.9
Exploitability
—
Impact
—
Vector string
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope X

Threat Intelligence

EPSS Exploit Probability
45.9% percentile
Exploit & Patch Status
Public Exploit Known
Patch Available

Weaknesses 1

CWE-617

Affected Products 1

VendorProductVersionRange
open5gsopen5gs* ≤2.7.3

References 7

  • github.com https://github.com/open5gs/open5gs/commit/2daa44adab762c47a8cef69cc984946973a845b3
    Patch
  • github.com https://github.com/open5gs/open5gs/issues/3909
    ExploitIssue TrackingVendor Advisory
  • github.com https://github.com/open5gs/open5gs/issues/3909#issuecomment-2926682623
    Issue TrackingVendor Advisory
  • github.com https://github.com/user-attachments/files/20362183/AMF.crash.due.to.pathswitchrequest.zip
    Not Applicable
  • vuldb.com https://vuldb.com/?ctiid.310915
    Permissions RequiredVDB Entry
  • vuldb.com https://vuldb.com/?id.310915
    Third Party AdvisoryVDB Entry
  • vuldb.com https://vuldb.com/?submit.582265
    Third Party AdvisoryVDB Entry

Remediation

  • github.com https://github.com/open5gs/open5gs/commit/2daa44adab762c47a8cef69cc984946973a845b3
    Patch